Any forums using https?

[Mike Edge]

works with cpanel?

Feel free to shoot me a PM if you need help installing it.. Be happy to walk you though it.

 

[dethfire]

Yes it has a easy to install WHM plugin.

Ah the enterprise version which is not cheap. Also it appears SPDY doesn't work with the stable litespeed 4 and only works with 5 which is only RC2

 

[m1ne]

No, it's a forum not an online store.

 

[thedude]

Ah the enterprise version which is not cheap. Also it appears SPDY doesn't work with the stable litespeed 4 and only works with 5 which is only RC2

Even without SPDY, make sure you're using a proper list of preferred ciphers. Some cipher suites are much more computationally expensive than others.

No, it's a forum not an online store.

No offense, but that's a very outdated argument against using https.

One quick reason to you use it is your admin password can be picked off easily in a MITM (Man In The Middle) attack by a bad actor.

Ever use WiFi at a public spot, like a coffee shop? If they don't have a password on the WiFi connection itself, then all your communication is traveling completely unencrypted through the air and can easily be snagged by anyone else in the same area, if you're not on an https site.

There are plenty of other reasons but those are the easy-to-explain ones.

 

[thumped]

there's also the idea that you might have a duty of care for your users' data

 

[Mike Edge]

Ah the enterprise version which is not cheap.

It's $46.00 a month for a 2 core license.. Having a 4.5 million post board, that is a priceless upgrade.. LiteSpeed with https is still noticeably faster then Apache using SPDY.

 

[m1ne]

One quick reason to you use it is your admin password can be picked off easily in a MITM (Man In The Middle) attack by a bad actor.

I use https in admin.php
Besides, the attacker would also need the htpasswd and a whitelisted IP.

Ever use WiFi at a public spot, like a coffee shop? If they don't have a password on the WiFi connection itself, then all your communication is traveling completely unencrypted through the air and can easily be snagged by anyone else in the same area, if you're not on an https site.

There are plenty of other reasons but those are the easy-to-explain ones.

No, not once have I used public wifi.

 

[thedude]

I use https in admin.php
Besides, the attacker would also need the htpasswd and a whitelisted IP.

Then your XF validation cookie is still flying around unencrypted upon loading a non-https page of your site, which is all an attacker would need to be "you".

No, not once have I used public wifi.

Your members probably do

 

[Mike Edge]

I use https in admin.php
Besides, the attacker would also need the htpasswd and a whitelisted IP.

A great deal of damage could still be done on the front end as they could still delete threads and ban members without needing to access ACP.

 

[Alpha1]

Switching to LiteSpeed is one of the best thing I have ever done for my big board. It saves a lot of server resources and has amazing caching and security features. It may look expensive but its saving me money. I'm pretty sure that I would have needed at least one more server if I would not run LSWS.

Anyway: I switched to https last summer. My site took a hit as it took months before Google reindexed my site regardless of 301 redirects. But all came back to normal in the fall.

 

[rafass]

@Alfa1 how much you pay for LiteSpeed? do you mind to link me via pm to take a look at the performance?
---
Xenforo works absolutely great, fast and without issues with SSL.
1000000% Recommended.
---
I also have a great hosting xdd.

 

[dethfire]

I just switched to LSWS and it has had a positive effect on performance moving from Apache 2.4

I went with the 1 core which is $32 a month

I am anxiously waiting for 1.5 which will include SPDY

 

[MattW]

I just switched to LSWS and it has had a positive effect on performance moving from Apache 2.4

I went with the 1 core which is $32 a month

I am anxiously waiting for 1.5 which will include SPDY

It's quite noticeable the improvement in speed, and the reduction in server load.

 

[Mike Edge]

I just switched to LSWS and it has had a positive effect on performance moving from Apache 2.4

I went with the 1 core which is $32 a month

I am anxiously waiting for 1.5 which will include SPDY

Honestly, speed the few extra bucks and go 2 cores, then you can take advantage of xF Litespeed Cache. All the big boards I host increased speed even more and reduced even more server load. Running a 6 million post forum like yours scares me that your only using one core..

 

[Alpha1]

@Alfa1 how much you pay for LiteSpeed? do you mind to link me via pm to take a look at the performance?

I run the most expensive version and pay $999 a year. check with @lsmichael or @eva2000 about performance.

 

[JordanH]

2/3 of my forums use ssl. Looking to switch my third on over as soon as I can.

I use https in admin.php
Besides, the attacker would also need the htpasswd and a whitelisted IP.



No, not once have I used public wifi.

Don't mean your users who use your forum don't.

 

[rafass]

I run the most expensive version and pay $999 a year. check with @lsmichael or @eva2000 about performance.

That's a lot of money
---
If this forum are using Litespeed, the performance is really Awesome:
https://community.centminmod.com/

 

[Alpha1]

Yes, but it actually saves a lot more money. It's a 8 core license for a site with millions of unique visitors. Without it I would need to buy or rent more high end servers. Now I can run the site from just one server. (not counting replication, backup, chat and the virtual BD/File servers running from that one server)

 

[rdn]

If this forum are using Litespeed, the performance is really Awesome:
https://community.centminmod.com/

Is running Nginx: http://centminmod.com/

 

[JordanH]

That's a lot of money
---
If this forum are using Litespeed, the performance is really Awesome:
https://community.centminmod.com/

Not really. I pay $140/m to keep my three boards online.
That puts it up to about $1,680 a year