Giorgio Maone wrote:In fact forums.informaction.com is not secured.
Only secure.informaction.com (used to serve NoScript's and FlashGot's XPIs) is.
This may change in future, but for the time being this is the (legitimate) setup.
GµårÐïåñ wrote:You are posting public discussions in a public forum that allow anonymous posting so you don't even need an account. So what's the problem, HTTP is just fine and HTTPS would be unnecessary. Its like putting a 10k sound system in a Yugo. Get over it and move on, its a legitimate setup and works just fine and doesn't need to be any more secure than it already is. Dead horse, stop beating it.
Is it worth revisiting this?
I for one would be happy to use HTTPS to access the forums, especially since the public transport system where I live offers free WiFi (which is of course insecure).
And I'd be willing to verify a self-signed certificate - or one signed by an Informaction CA - to save Giorgio the expense of buying one.
ETA: Also discussed at viewtopic.php?f=14&t=412&p=1489. Giorgio wasn't too concerned, but I tend to agree with Tom's concerns.