Old 15th October 2018, 23:58   #1
BFeely
Junior Member
 
Join Date: Mar 2016
Posts: 14
Why no HTTPS?

Any reason in late 2018 Radionomy isn't using HTTPS for this forum?
The version of Chrome Dev I am typing this on is showing a red triangle in the address bar.
BFeely is offline   Reply With Quote
Old 18th October 2018, 07:03   #2
musicf8
Major Dude
 
musicf8's Avatar
 
Join Date: Apr 2013
Location: Orange, CA
Posts: 692
Because they don't care

(┛◉Д◉)┛彡ʎɯouoıpɐɹ

Current status of Winamp 5.8: Beta released, the last desktop version get wacup

Winamp v5.6.6.3516 bumping through Windows 10 Pro w/ Logitech Z-5500
musicf8 is offline   Reply With Quote
Old 21st October 2018, 19:27   #3
BFeely
Junior Member
 
Join Date: Mar 2016
Posts: 14
Can they be held liable? They just discovered HTTPS is free and added it to the homepage.
BFeely is offline   Reply With Quote
Old 22nd October 2018, 05:23   #4
musicf8
Major Dude
 
musicf8's Avatar
 
Join Date: Apr 2013
Location: Orange, CA
Posts: 692
Liable for? It's not a crime not to use https

(┛◉Д◉)┛彡ʎɯouoıpɐɹ

Current status of Winamp 5.8: Beta released, the last desktop version get wacup

Winamp v5.6.6.3516 bumping through Windows 10 Pro w/ Logitech Z-5500
musicf8 is offline   Reply With Quote
Old 24th October 2018, 00:14   #5
BFeely
Junior Member
 
Join Date: Mar 2016
Posts: 14
Seeing as the main site got Let's Encrypt and that this site is on a dedicated IP, I don't see it as being too hard, unless the vBulletin license is such that changing would mean needing a license for a new server.
BFeely is offline   Reply With Quote
Old 24th October 2018, 00:17   #6
musicf8
Major Dude
 
musicf8's Avatar
 
Join Date: Apr 2013
Location: Orange, CA
Posts: 692
I think it's more neglection. The front page is the most activity we have seen in 4+ years. The forums still has references to AOL servers. Honestly if 5.8 was never leaked, then i doubt the front page would have been updated.

(┛◉Д◉)┛彡ʎɯouoıpɐɹ

Current status of Winamp 5.8: Beta released, the last desktop version get wacup

Winamp v5.6.6.3516 bumping through Windows 10 Pro w/ Logitech Z-5500
musicf8 is offline   Reply With Quote
Old 11th November 2018, 21:22   #7
BFeely
Junior Member
 
Join Date: Mar 2016
Posts: 14
Homepage might not actually have HTTPS after all, as it is a Cloudflare (likely Business/$200/mo due to the custom certificate) IP address, and Cloudflare supports cheating by having their proxy run HTTPS but the backend run unencrypted. Browsers and search engines will just blindly see it as valid.
BFeely is offline   Reply With Quote
Old 27th November 2018, 22:54   #8
Dr.Flay
Senior Member
 
Dr.Flay's Avatar
 
Join Date: Mar 2013
Location: Cornwall
Posts: 151
Send a message via ICQ to Dr.Flay Send a message via Skype™ to Dr.Flay
Various issues, Grade C
https://www.ssllabs.com/ssltest/anal...l?d=winamp.com

Can they be held liable?
Yes if the site is breached or our plain text login details become available for sale.
And since GDPR, very biggly so.

Mashups ? Smells like a lot of "Fishy Business" to me.
Visit my label at www.last.fm/label/Fishy+Business for musical education.
Dr.Flay is offline   Reply With Quote
Old 28th November 2018, 02:05   #9
MrSinatra
Forum King
 
MrSinatra's Avatar
 
Join Date: Dec 2004
Location: WKPS, State College
Posts: 5,438
Send a message via AIM to MrSinatra
Please let's not get the site turned off, ok?

PENN STATE Radio or http://www.LION-Radio.org/
--
BUG #1 = Winamp skips short tracks
Wish #1 = Multiple Column Sorting
Wish #2 = Add TCMP/Compilation editing
MrSinatra is offline   Reply With Quote
Old 30th December 2018, 14:31   #10
BFeely
Junior Member
 
Join Date: Mar 2016
Posts: 14
It would be Winamp's responsibility for failing to provide even minimal industry standard security.

The Grade C given by SSL Labs is due to supporting SSLv3, and as a result being vulnerable to POODLE.
Even if SSLv3 were turned off, it would be capped to B because the site administrator installing the certificate file but not the chain file. This can cause a browser error if the intermediate certificate is not already in the browser's cache.

The server does support TLS 1.2, so the SSL toolkit installed on the server isn't completely obsolete.
The server does support strong ciphersuites, but at the same time supports the broken RC4 suite, and does not set server preference to the strong suites.
BFeely is offline   Reply With Quote
Old 30th December 2018, 16:10   #11
Dr.Flay
Senior Member
 
Dr.Flay's Avatar
 
Join Date: Mar 2013
Location: Cornwall
Posts: 151
Send a message via ICQ to Dr.Flay Send a message via Skype™ to Dr.Flay
It should be noted that the grade C is for the main domain.
Here in the forums there is no encryption
https://www.ssllabs.com/ssltest/anal...ums.winamp.com

Mashups ? Smells like a lot of "Fishy Business" to me.
Visit my label at www.last.fm/label/Fishy+Business for musical education.
Dr.Flay is offline   Reply With Quote
Old 2nd January 2019, 12:43   #12
Wineroz
Junior Member
 
Join Date: Oct 2018
Posts: 17
HTTPS is just to many letters. 4 is enough
Wineroz is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Winamp > Winamp Site Design

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump