https should now work

If you prefer to browse in https you can use https://www.sythe.org/

However images aren't being proxied so while your actual connection to Sythe.org will be secure, you will still be loading off-site images.

HTTPS is quite a bit slower than http, and I would only recommend using it if you're at a cafe, airport or somewhere else people might potentially be sniffing the network.

Of course using 2fa on all your accounts and devices is your number one best way to secure yourself against hackings.

Let me know if there are any bugs

 

Thanks for the information and for helping keeping our account secure, this sure will come in handy.

 

Glad that you added that feature for the people who'd want to use it. Great work so far.

 

Why would someone be sniffing at my computer?

 

[Time To Buy]

Thanks Sythe Security is very important

Why would someone be sniffing at my computer?

Some people have weird fetishes

 

All the updates are coming along nicely, thanks.

 

[Ritysayo]

That's awesome. Have you thought about getting the website certified? You mentioned in the past that you required two different email addresses for some reason. I believe Comodo has SSL verification for websites, and they even have signing methods/2FA for emails.

With a design process, you might be able to create a system in which allows users to have @sythe.org emails which could create a secure emailing system to keep dedicated members of the community updated with community events. I'm pretty sure @sythe.org email addresses are on the "Do Not Suggest" list due to the amount of time it would take. I'm only making a note of it because it might be beneficial for active members of the community to use those email addresses to keep their on-site transactions and newsletters.

On the topic of those emails, would it be possible to automate it for donators? People who have donated have access to specific perks in the User Center, what if it was designed to allow each user to create one unique email using the Sythe extension. This lets users make them instead of admins manually adding them. Does Xenforo have an addon that would make the process easier?

Forgive me, I'm just rambling at this point. Those are a few of my thoughts, maybe they will spark an idea for you guys. Thanks again for the update!

 

That's awesome. Have you thought about getting the website certified? You mentioned in the past that you required two different email addresses for some reason. I believe Comodo has SSL verification for websites, and they even have signing methods/2FA for emails.

With a design process, you might be able to create a system in which allows users to have @sythe.org emails which could create a secure emailing system to keep dedicated members of the community updated with community events. I'm pretty sure @sythe.org email addresses are on the "Do Not Suggest" list due to the amount of time it would take. I'm only making a note of it because it might be beneficial for active members of the community to use those email addresses to keep their on-site transactions and newsletters.

On the topic of those emails, would it be possible to automate it for donators? People who have donated have access to specific perks in the User Center, what if it was designed to allow each user to create one unique email using the Sythe extension. This lets users make them instead of admins manually adding them. Does Xenforo have an addon that would make the process easier?

Forgive me, I'm just rambling at this point. Those are a few of my thoughts, maybe they will spark an idea for you guys. Thanks again for the update!

Great idea and all bud, but not even staff members have @Sythe email addresses. I think the possibility of them being used to seem "official" and the fact even the most trustworthy of users have gone rogue in the past will be a big no-no on that side of things.

 

[Ritysayo]

Great idea and all bud, but not even staff members have @Sythe email addresses. I think the possibility of them being used to seem "official" and the fact even the most trustworthy of users have gone rogue in the past will be a big no-no on that side of things.

I apologize, but I'm misunderstanding the issue. Do you mean it would be difficult to remove the emails from the system?

I'm only speaking in theory, but if there is an add-on associated with the email creation process maybe create a script where banned user account emails will be deactivated and reactivated when their user group is changed.

Do you believe that having those emails escalate someone's trust level?

They're only considered official if they're advertised as such. It does not make them appear more trusted because it would be public information that they're given to donators. That is equivalent to saying donators seem more trusted. They might be considered it by a few novice users, but in reality, it is exactly how you describe it. Even the most trustworthy people in the past have gone rogue.

In my perspective, it is just an additional feature that could contribute to community safety. It allows members to keep track of Sythe related events, and members can use the address to register to off-site applications like Skype. I'm thinking that it might be modified to add an extra level of protection against ban evaders. Preventing people from registering their email address while logged on to a VPN or if it has been associated with another email in the system; have it throw up a flag on the account. Right now, I don't think that the website registration prevents VPN logins because a lot of people use proxies. There isn't an excuse for a user not being able to turn it off while creating the email.

Anyway, I'm only debating for the sake of brainstorming! You are probably 100% correct, and I highly doubt it will be implemented! Just wanted to pop in a few ideas that the other admins might consider in the future.

 

HTTP/2.0 with SSL can be faster than HTTP/1.1 without SSL.

Nginx + Let's encrypt makes it free.

 

[Swaze]

Thanks for the notice.

 

[Jeff]

Awesome feature, also noticed the time at the top of the page which is pretty cool too.

 

HTTP/2.0 with SSL can be faster than HTTP/1.1 without SSL.

Nginx + Let's encrypt makes it free.

Probably wouldn't use lets encrypt although it is tempting. I'm aware the latest tech is pretty fast. Cloudflare just started supporting http 2.0 recently.

I'll be looking into all of the above when xen stabilises.