We are in the process of enabling HTTPS-encryption sitewide. For several years lighting-gallery.net has employed HTTPS-encryption for the login process, but not for any content viewed before or after signing on. Now, HTTPS will continue to be used following the login page, and shortly I plan to switch on for visitors who have not signed in as well.
HTTPS encrypts traffic being sent over the network between your browser and our server. It helps ensure information cannot be intercepted, and helps prevent a network intruder from inserting their own content and having it appear to be from our site. We have not had any specific security concerns, but browser makers and search engines are beginning to increasingly single out non-https sites as less secure, by showing prominent warnings or decreasing their search rankings. Therefore, I feel it's a move we should be making even though most of our content is not highly sensitive.
Part of the solution includes in image proxy, which should allow you to continue to include images from http sources using the [img] tag. The proxy will request them server-side, and relay them to our visitors over https. Let us know if you encounter any issues that might be related to the switch.
|
|
« Last Edit: February 10, 2018, 12:31:17 AM by Patrick »
|
Logged
|