Welcome, Guest: Register On Nairaland / LOGIN! / Trending / Recent / New
Stats: 3,158,157 members, 7,835,868 topics. Date: Tuesday, 21 May 2024 at 04:31 PM

Is 'HTTPS' Restricted To Only Foreign Websites? - Webmasters (2) - Nairaland

Nairaland Forum / Science/Technology / Webmasters / Is 'HTTPS' Restricted To Only Foreign Websites? (7850 Views)

What Is Https And 3 Reasons Why Your Business Website Needs An SSL Certificate? / 5 Popular Foreign Websites To Buy Cheap Domain Names (2) (3) (4)

(1) (2) (3) (Reply) (Go Down)

Re: Is 'HTTPS' Restricted To Only Foreign Websites? by nairalandbuzz(m): 9:14am On Jul 23, 2017
SSL is free on Free Cloudflare.

If you are not using Cloudflare, you are on your own as a web admin.

Encrypt also is free just that you must be renewing it every month except you have a web host that does it automatically for u

1 Like

Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dogstyle007(m): 9:16am On Jul 23, 2017
I think Nairaland is using Cloudflare which makes it secured in some way
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by senatorizyking(m): 9:17am On Jul 23, 2017
chijioke0132:
talk of winning and making money call or whatsapp me with the number in the picture below.....




Scammers on rampage !
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dionysus7: 9:21am On Jul 23, 2017
Codedboy95:
i use https for my website https://www.droid.ng

just visited, good stuff, please make it responsive and fonts...comic sans is the cancer for browsers
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by ivolt: 9:47am On Jul 23, 2017
Kondomatic:
Nairaland users are not up to one one million.

Evidence ?
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by bigrovar(m): 9:58am On Jul 23, 2017
Wisdombankxz:
No Sir... Don't be surprise Nairaland security is stronger than Https.
Any site can have HTTPS na small money kill am.




___________________________________________

Meanwhile I have active 16k followers instagram account for sale
Niche =Fashion
Audience =99% Nigerians

Call or whatsapp 08084334575 for cool transaction.

dogstyle007:
I think Nairaland is using Cloudflare which makes it secured in some way

The above post shows the misconception people have about SSL (Secured Socket Layer). SSL is not meant to protect a website per se (It can to a limited extent protect a website domain from phishing or man in the middle attack).

However the main purpose of SSL is to protect the user of a website. Most importantly things like the user login data but also ensures the user's privacy by ensuring that data between the users and a website is encrypted and not visible to anyone monitoring the network the a user is browsing from.

What ssl does is create a secured tunnel between the user and the website. anyone monitoring a network using tools like wireshark would not be able to see data being transmitted between the user and the website. This ensures that important information like the user login details are not revealed to preying eyes.

Nairaland not having SSL is a huge security hole and a big de-service to its. It means anytime you login into Nairaland, any one monitoring the network you are connected to can not only see the exact page you are browsing from. The will see what you are typing and even see your login details. Wireshark too for network snooping is so common that it can be installed and operated from a mobile phone. And because most users use common passwords i.e same passwords for multiple devices. The NL password can be used to gain access into some other services like their email, facebook etc.

Why is nairaland not using SSL: It is definitely not because of cost. Free SSL certificates are now available. Letsencrypt for examples offers free SSL/TLS certificates for free valid for 6 months, they also include scripts that automate renewal process. Besides a wild card certificate cost less than 200 dollars (less than 80k per year) so cost is definitely not the reason.

If not cost then why
encrypting a site with SSL can affect performance of the site. This is because optimisation like compression of data might be affected, and also the decryption process using CPU. However modern cpus have dedicated instructions capable of handling website encryption an example is one of the most popular ciphers, the Advanced Encryption Standard (AES), has had dedicated instructions added to modern CPUs, helping it run substantially faster than ciphers implemented in software.

The idea that SSL affect performance is now essentially a myth. Even then if the administrators are scared of performance related ssl issues. They can always implement a system where by only the login pages are encrypted. That way at least only a user login information is protected. This can be implemented using simple apache/ngnx rewrites to direct all login pages and user profiles to https. and the user is directed by to http. I implemented some similar on this site http://repository.aust.edu.ng (An E-library website) The main site is unencrypted however you will be directed to https when you attempt to login.
Here the user login data is protected but the rest of the site is unencrypted since its mostly meant for downloading of contents.

NAIRALAND HAS NO EXCUSE NOT TO USE ENCRYPTION. It owes it to its users.

My advise to users of NL is never use the same password on NL has with what you use on important sites like facebook, email, twitter etc.

7 Likes 1 Share

Re: Is 'HTTPS' Restricted To Only Foreign Websites? by ABAboi: 9:59am On Jul 23, 2017
https://www.company.com.ng uses SSL to secure its users against phishing and hacking
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by bigtt76(f): 10:03am On Jul 23, 2017
You can get it for free on Let's Encrypt.



CocoBee:


Is it a monetized package (the SSL certificate) if so how is it obtained (from your host or what) and sustained? (monthly or yearly payment)
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by charlsecy(m): 10:10am On Jul 23, 2017
CocoBee:
Isn't nairaland similar? And it's not encrypted with 'https'
There is no sensitive info stored on Nairaland, so she doesn't really need it.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 10:28am On Jul 23, 2017
wonlasewonimi:
What sensitive data is transmitted through nairaland? if they are not killing a snake in akwa ibom, jamil is celebrating his 2 years wearing gucci.
Also, ALL the information on nairaland are for public consumption.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Kondomatic(m): 10:46am On Jul 23, 2017
ivolt:


Evidence ?
I know someone here who has over ten usernames and there are many like him.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Zetra(m): 11:34am On Jul 23, 2017
Emmysky:
That's because they haven't bought and installed an SSL Certificate for it on their server. I myself use SSL(Https)...No biggie.
Although i think Nairaland should seriously look into it. Being a forum with 1.8M users, SSL is overly necessary.

I have small foreign companies / individuals with SSL but in Nigeria we think it's waste of money, even government websites are not secured e.g check npower site
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by cdoffx(m): 11:47am On Jul 23, 2017
CocoBee:
Webmasters, I noticed that only foreign websites do use 'https' and local websites (even nairaland) only use 'http'. . Why is that please? Thanks in advance!
Https simply ensures an encrypted communication from the client side to the server side and its most necessary for website that olds sensitive information about users or where users will have to enter sensitive information like card number, pin, DOB, maiden name etc... Nairaland don't have much sensitive info about her users so I don't really thing its very necessary for NL to have SSL however it doesn't hurt having
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:49am On Jul 23, 2017
CocoBee:
Webmasters, I noticed that only foreign websites do use 'https' and local websites (even nairaland) only use 'http'. . Why is that please? Thanks in advance!
Nigerian websites do use that. Look at the betting websites, banks and all, they all installed SSL Certificate to keep some important informations secured. The cost implication is no big deal and it actually saves a lot of unforseen hits from the devils. I don't know why Nairaland hasn't installed any - considering how big the website is.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:53am On Jul 23, 2017
cdoffx:

Https simply ensures an encrypted communication from the client side to the server side and its most necessary for website that olds sensitive information about users or where users will have to enter sensitive information like card number, pin, DOB, maiden name etc... Nairaland don't have much sensitive info about her users so I don't really thing its very necessary for NL to have SSL however it doesn't hurt having
Some users use same NL password as their email password. And, your email is right under your account. I'm sure you know how far people can go with Informations that we have in our mail. It's not even expensive to have one installed.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Timbuktu14(m): 11:55am On Jul 23, 2017
inthemirror09i:
Today's sure game just dropped as promised..
This is what our ticket looks like almost a year ago. And you are still here trying to scam people with this extremely stale fake tickets? When exactly do you want to get a life?
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by lilprodigy(m): 12:10pm On Jul 23, 2017
ThankYouGod:
Any website in anywhere in the world can have https. It's for security when sensitive information is required from the users. All the banks' websites in Nigeria have it. If you don't see it, try to use their internet banking you will see it.

I use https://www.kamposa.com on my website
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by abdulgold07(m): 12:21pm On Jul 23, 2017
wonlasewonimi:
What sensitive data is transmitted through nairaland? if they are not killing a snake in akwa ibom, jamil is celebrating his 2 years wearing gucci.
lol I second this
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by fratermathy(m): 12:34pm On Jul 23, 2017
Just goto sslforfree.com and get one FREE! Don't stress yourself.

However, if you intend using it for a site with a payment gateway, always try and buy a premium one.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Emmysky(m): 12:37pm On Jul 23, 2017
Kondomatic:
Nairaland users are not up to one one million.
In theory that's correct but we can't actually determine the number of active usere now can we? We only depend on the stats in the header section.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 1:16pm On Jul 23, 2017
Timbuktu14:
Nigerian websites do use that. Look at the betting websites, banks and all, they all installed SSL Certificate to keep some important informations secured. The cost implication is no big deal and it actually saves a lot of unforseen hits from the devils. I don't know why Nairaland hasn't installed any - considering how big the website is.

"I don't know why Nairaland hasn't installed any - considering how big the website is." � My point exactly
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 2:12pm On Jul 23, 2017
Emmysky:
That's because they haven't bought and installed an SSL Certificate for it on their server. I myself use SSL(Https)...No biggie.
Although i think Nairaland should seriously look into it. Being a forum with 1.8M users, SSL is overly necessary.
Not necessary on Nairaland cos there is no exchange of sensitive data on the site to protect.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 2:46pm On Jul 23, 2017
dionysus7:


famous Nigerian online mall; Konga uses https...so if through all your web surfing experience, you noticed that no Nigerian site uses https, i suggest you start widening your browsing experience.

Those are company sites bro.. Give me 5 Nigerian blogs and 5 Nigerian forums that use 'https' and I'll shamefully widen my browsing experience!
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by epelumi42(m): 3:13pm On Jul 23, 2017
SConnect:


SSL Certificate is included for FREE with our hosting package.

Top Features:
Unlimited Web Space
Unlimited Monthly Bandwidth
Free Unlimited SSL Certificates
Free Automatic Daily Backup
100% Uptime Guarantee
Fully supports Wordpress, Joomla, Drupal, SMF, etc
FREE Softaculous Auto Installer
FREE Website Transfer
London, UK Data-center

Starting at ₦2700 First Year using Promo Code: 50%OFFUNLIMITED
Payments Accepted via Bitcoin, PerfectMoney, PayPal, Naira MasterCard/Verve/Visa & GTBank Internet Banking
Website: https://www.speedyconnect.net/ng

Why You Should Host Your Website With Us

UNLIMITED BANDWIDTH/TRAFFIC
At SpeedyConnect.net, worrying about the bandwidth/traffic consumption of your shared hosting account is a thing of the past as each of our shared hosting packages has Unlimited bandwidth/traffic.

WE ARE NOT RESELLERS
We own and manage all our servers, This allows us to pass on very competitive lowest cost prices unto our customers.

24/7/365 CUSTOMER SUPPORT
We are always here to serve you 24/7/365 (Day and Night) via Live Chat, Ticket.

100% UPTIME GUARANTEE
We hate downtime just as much as you do. We guarantee your website a rock solid 100% uptime, which means your website will be online always.

LOW PRICE GUARANTEE
Our Hosting prices are very cheap and include an extensive list of features including UNLIMITED web space, UNLIMITED bandwidth, and If you know of any host offering same features at a lower price, just contact us and we will beat it.

FREE AUTOMATIC DAILY BACKUP
Your data are automatically backed up daily and stored in multiple backup servers at no extra cost. Sleep well knowing your data is in safe hands.

YOU BENEFIT FROM HIGH QUALITY SERVICES
We utilize only High spec Intel Xeon CPU's, Enterprise SATA's & SSD's, fully redundant premium network, 1Gbps Uplink and lot's more.

----------
Follow us on Social Media:
Twitter: https://twitter.com/speedyconnect
Facebook: https://facebook.com/speedyconnect.net
Instagram: https://instagram.com/speedyconnect_net
------------

Do you have a plan that supports up to 50 add on domains?
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by dogstyle007(m): 3:18pm On Jul 23, 2017
bigrovar:




The above post shows the misconception people have about SSL (Secured Socket Layer). SSL is not meant to protect a website per se (It can to a limited extent protect a website domain from phishing or man in the middle attack).

However the main purpose of SSL is to protect the user of a website. Most importantly things like the user login data but also ensures the user's privacy by ensuring that data between the users and a website is encrypted and not visible to anyone monitoring the network the a user is browsing from.

What ssl does is create a secured tunnel between the user and the website. anyone monitoring a network using tools like wireshark would not be able to see data being transmitted between the user and the website. This ensures that important information like the user login details are not revealed to preying eyes.

Nairaland not having SSL is a huge security hole and a big de-service to its. It means anytime you login into Nairaland, any one monitoring the network you are connected to can not only see the exact page you are browsing from. The will see what you are typing and even see your login details. Wireshark too for network snooping is so common that it can be installed and operated from a mobile phone. And because most users use common passwords i.e same passwords for multiple devices. The NL password can be used to gain access into some other services like their email, facebook etc.

Why is nairaland not using SSL: It is definitely not because of cost. Free SSL certificates are now available. Letsencrypt for examples offers free SSL/TLS certificates for free valid for 6 months, they also include scripts that automate renewal process. Besides a wild card certificate cost less than 200 dollars (less than 80k per year) so cost is definitely not the reason.

If not cost then why
encrypting a site with SSL can affect performance of the site. This is because optimisation like compression of data might be affected, and also the decryption process using CPU. However modern cpus have dedicated instructions capable of handling website encryption an example is one of the most popular ciphers, the Advanced Encryption Standard (AES), has had dedicated instructions added to modern CPUs, helping it run substantially faster than ciphers implemented in software.

The idea that SSL affect performance is now essentially a myth. Even then if the administrators are scared of performance related ssl issues. They can always implement a system where by only the login pages are encrypted. That way at least only a user login information is protected. This can be implemented using simple apache/ngnx rewrites to direct all login pages and user profiles to https. and the user is directed by to http. I implemented some similar on this site http://repository.aust.edu.ng (An E-library website) The main site is unencrypted however you will be directed to https when you attempt to login.
Here the user login data is protected but the rest of the site is unencrypted since its mostly meant for downloading of contents.

NAIRALAND HAS NO EXCUSE NOT TO USE ENCRYPTION. It owes it to its users.

My advise to users of NL is never use the same password on NL has with what you use on important sites like facebook, email, twitter etc.
Nice one
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by BabaUkpaka: 3:30pm On Jul 23, 2017
SSL certificates that will make your site have https instead of http are sold for 1k by some host, others include it as part of a the package if your buy certain hosting plan.
so its is up to you to have the certificate or not. though very essential
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by SConnect: 4:45pm On Jul 23, 2017
epelumi42:


Do you have a plan that supports up to 50 add on domains?

We will contact you shortly for further discussion.

Thank you.
Re: Is 'HTTPS' Restricted To Only Foreign Websites? by mercyviv(f): 4:47pm On Jul 23, 2017
CocoBee:


Those are company sites bro.. Give me 5 Nigerian blogs and 5 Nigerian forums that use 'https' and I'll shamefully widen my browsing experience!
Well, I don't know of other nigerian blogs and forums, but I do know of this website, 6TERS; its a nigeria forum and they use the https. This is one forum where members activities are compensated to swell their WALLET. Members provide vital info such as Bank Acc., IDs for proof etc, in order to get paid directly into their choice bank accounts.
So thinking nigerian blogs and forums are so behind is very myopic to say the least! Widen your horizon bro.

1 Like

Re: Is 'HTTPS' Restricted To Only Foreign Websites? by Nobody: 5:05pm On Jul 23, 2017
mercyviv:

Well, I don't know of other nigerian blogs and forums, but I do know of 6TERS (https//www.6ters.com); its a nigeria forum and they use the https. This is one forum where members activities are compensated to swell their WALLET. Members provide vital info such as Bank Acc., IDs for proof etc, in order to get paid directly into their choice bank accounts.
So thinking nigerian blogs and forums are so behind is very myopic to say the least! Widen your horizon bro.


Lol, alright sis. But you still have to pay for the plot of land you used to advertise your forum tho.. By the way, change the URL on your signature, I had to Google '6ters' to view it. Nice forum tho, are you charged monthly for the https?

(1) (2) (3) (Reply)

Nigerian Government Website Defaced By Brazilian Hackers / Forget SEO, Pay For Ads If You Have The Money / What Are The Advantages And Disadvantages Of Uk Non Hosted Adsense?

(Go Up)

Sections: politics (1) business autos (1) jobs (1) career education (1) romance computers phones travel sports fashion health
religion celebs tv-movies music-radio literature webmasters programming techmarket

Links: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10)

Nairaland - Copyright © 2005 - 2024 Oluwaseun Osewa. All rights reserved. See How To Advertise. 73
Disclaimer: Every Nairaland member is solely responsible for anything that he/she posts or uploads on Nairaland.