Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 19 Jan 2015, 05:00
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
Does SSL work with vb4

I am looking for feedback from people who have used SSL with vb4 and want to know if they recommend it.
Reply With Quote
  #2  
Old 19 Jan 2015, 05:17
CAG CheechDogg's Avatar
CAG CheechDogg CAG CheechDogg is offline
 
Join Date: Feb 2012
Of course it works with vB4 .... I have it on my site now ..
Reply With Quote
  #3  
Old 19 Jan 2015, 05:18
AndrewSimm's Avatar
AndrewSimm AndrewSimm is offline
 
Join Date: Sep 2006
Originally Posted by LostInCyberLand View Post
I am looking for feedback from people who have used SSL with vb4 and want to know if they recommend it.
I use it and it works just fine. It is needed to use SPDY but if I wasn't using that then I probably wouldn't use it.

Why are you considering it?
Reply With Quote
  #4  
Old 19 Jan 2015, 06:08
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
Sorry instead of work I really meant does vb4 need any mods to get it working without a hitch.

My reason for considering it was because google plans to make https the industry standard, and thought perhaps I should just get one now while my forum is small instead of waiting until later if it is larger.
Reply With Quote
  #5  
Old 19 Jan 2015, 08:59
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
Should work fine after you change the base URL of your vBulletin forum to use HTTPS instead of HTTP.
At the vBulletin settings > Server Settings and Optimization options you should also configure a custom Remote YUI Path such as https://ajax.googleapis.com/ajax/libs/yui/ which uses HTTPS.

Also you may be receiving mixed content errors when there's embedded media such as images/videos on a post which loads stuff through HTTP.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.

Last edited by Dave; 19 Jan 2015 at 09:46.
Reply With Quote
  #6  
Old 19 Jan 2015, 11:09
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
Thanks for the advice Dave. Yeah I have been on other forums with SSL and constantly got errors coming up saying the content was unsafe, which is annoying, and makes you wonder about your security, which is not something I want people to experience on my forum.
Reply With Quote
  #7  
Old 22 Jan 2015, 07:55
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
My host is advising me against getting SSL. I am told that it will make the site slow and that it is overkill. But I notice all the big sites use SSL such as Twitter and they don't seem to be slow. If google is going to go SSL in future I don't see the harm of getting it now. And judging from opinions on here it seems people generally think they are unnecessary. I am just thinking not having a SSL might make people hesitate before joining as everything they input into my forum will be accessible for anyone on the net to see. I don't want my members thinking that what they say or do my forum is not important enough to be encrypted, as it implies I don't care about their security or don't see them as important enough to warrant encryption.

Any pro/cons for why I should not get it? I can't think of any. I am thinking I may just get SSL on the log in and registration pages.

--------------- Added 22 Jan 2015 at 08:20 ---------------

Does it make a difference who you use when getting SSL for vBulletin?

Last edited by LostInCyberLand; 22 Jan 2015 at 08:13.
Reply With Quote
  #8  
Old 22 Jan 2015, 08:54
Dave Dave is offline
 
Join Date: Jun 2010
Real name: Dave
It will not make the site go slow nor is an overkill. It only requires a bit more processing power of the web-server because of the encryption and that's about it.

It doesn't matter where you buy the SSL, just get the cheapest one available.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com

Contact me for custom vBulletin 3/4 work & server/website management.
Reply With Quote
  #9  
Old 22 Jan 2015, 08:59
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
Thanks for the reply Dave. Maybe my host is concerned about that. I may just leave it as is for now but see most websites according to the stats use one with only 44% not using one.
Reply With Quote
  #10  
Old 22 Jan 2015, 13:25
HM666's Avatar
HM666 HM666 is offline
 
Join Date: Jan 2014
Real name: Len Kaiser
You cannot gauge your traffic or SSL server usage by Twitter as Twitter is a much larger site and they probably have several servers that are super fast. So if SSL made a server run slow comparing to Twitter is not really realistic.

As for slow, I've had SSL on a site before and never really noticed any difference at all. It sounds like the host has no idea to me what they are doing.
Reply With Quote
  #11  
Old 23 Jan 2015, 01:20
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
HTTPS requires an initial “handshake” to create a connection between the browser and the server, and this handshake can be be very slow.

The problem

It takes at least four TCP roundtrips just to open a single SSL connection between the client and the server — and this doesn’t happen until after the initial TCP connection has been set up. The amount of data transferred as part of the handshake isn’t huge (under 5 kB typically), but for very small requests this can be quite a bit of overhead.
Important to know: The SSL handshake is actually even more process intensive than the actual data encryption that happens over the connection after the handshake is successfully complete.
How to know if this problem affects you

No one can give you a meaningful answer to this question without some information about the nature of your web site, hardware, software, and network configuration.
There are a couple of ways to look into this problem for your own site:
1. Profile the performance of your web server. There are several tools out there (such as JMeter and Visual Studio) to compare the performance of an HTTP vs HTTPS server.
2. Run WebPagetests of key secure pages on your site. Look at the purple bars on the waterfall chart that indicate SSL negotiation. You don’t want to see:
  • too many purple bars
  • long purple bars
  • purple bars associated with non-essential page resources
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​ OzzModz down. Site has had a data breach, checking how the intrusion happened. Change your PW if you use the same one on my site and others.
Reply With Quote
  #12  
Old 23 Jan 2015, 13:19
LostInCyberLand LostInCyberLand is offline
 
Join Date: Nov 2014
Thankyou for the information. I will keep it in mind, but have decided for now not to go with SSL and keep my site as simple as possible until I get more confident with it.
Reply With Quote
  #13  
Old 24 Jan 2015, 00:25
ozzy47's Avatar
ozzy47 ozzy47 is offline
 
Join Date: Jul 2009
Real name: Chris
Yeah you can always switch to it easily if need be.
__________________
You can get access to my 180 mods for vB 3.6 - 4.x at The Admin Zone as well as the professional support you are used to. New vBulletin Spider Definitions, vBulletin Spiders List Hits 1000 Spiders! ​ OzzModz down. Site has had a data breach, checking how the intrusion happened. Change your PW if you use the same one on my site and others.
Reply With Quote
  #14  
Old 27 Jan 2015, 21:55
thetechgenius's Avatar
thetechgenius thetechgenius is offline
 
Join Date: Jun 2014
I have been running SSL on my entire forum since I first setup my forum. I have it enabled throughout the entire forum, not just on the Login Page. I haven't had any problems at all, and my forum still loads very very fast. Actually, I tested my site on a few speed test sites, and it says my site is about faster then 75%+ of all sites tested. And my site is heavily customized with a bunch of custom addons made by me, and a lot of custom CSS/HTML.

HTTPS doesn't really make your site slower, as long as your server network has a decent speed, you should be fine. My server runs on a Fiber Network with its own dedicated IP, 90Mbps Upload and 90Mbps Download.

If you can afford it, SSL/HTTPS is the way to go. It tells your users that you care about their security and privacy, and it also makes your forum look more legit and professional. (Even though you really don't need SSL on a forum. But its never a bad idea to run SSL)
__________________
TheTechGenius.Net Official IRC Network (ONLINE)
Host: irc.thetechgenius.net
Port: 6667
TTG IRC Web Client - http://thetechgenius.net/irc.html
Reply With Quote
  #15  
Old 27 Jan 2015, 23:17
pityocamptes's Avatar
pityocamptes pityocamptes is offline
 
Join Date: May 2010
On a side thought anyone find a work around for rss feed coming in to a https site? I get the icon showing dual security on content. Thanks.
__________________
https://www.gunsgrubandgold.com

[SIGPIC][/SIGPIC]
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 15:09.

Layout Options | Width: Wide Color: