Is it possible to use the Forums in non encrypted mode ?

berbae · 2010-07-17 21:50:52

The default mode is now ssl encrypted, but is it possible to return to the old non ssl encrypted mode, for those not so concerned with security for the Forums ?
I use Firefox.

wonder · 2010-07-17 21:56:20

no, firefox from arch should work, for other system you need to import cacerts root. check out this thread: https://bbs.archlinux.org/viewtopic.php?id=101123

berbae · 2010-07-17 22:08:06

Yes it works with the Arch Namoroka Firefox. I didn't say it doesn't work.
My concern was to be able to choose not to be in the ssl encrypted mode for the Forums.
So you say it is not possible to change the default mode.
Can you confirm that please ?

Pierre · 2010-07-17 22:09:27

There is no point in not using encryption.

stqn · 2010-07-18 11:17:17

Yes there is, actually. Encrypted pages are not cached and are reloaded from the server every time, which is slower, for one, and also refreshes the "last 24h" posts list which makes it difficult to see where we were after replying to a post (because the thread we've just replied to jumped to the top of the first results page.)

berbae · 2010-07-18 15:53:01

As the pages of the Forums are not cached anymore, the back arrow of the browser forces a refresh of the pages each times they are returned to.
So another effect is that the place of the last focused link is lost, there is no more the little dotted lines around it.
So that accessibility function is lost with the ssl encrypted mode of the Forums pages. Personally I regret it.

After some researches, I found that the 'browser.cache.disk_cache_ssl' option of Firefox has no effect if set to 'true' instead of the default 'false'.
I found that it is caused by the 'Pragma: no-cache' directive in the response-head of the Forums pages. That directives doesn't permit the caching of the pages even if Firefox could permit it.

I presume that I cannot ask a change of the Pragma directive of the Forums pages, because it would be there for the same reasons as the choice of the ssl encryption mode in the first place.

So I will do with it.

Now to preserve the focus of the last clicked link, I open each link in a new tab with a middle-click instead of a left-click; and instead of clicking the back arrow, I close the tab clicking the cross in the tab bar, so the preceding page is not refreshed and the focus is preserved.
I now have to get used to that practice, but it's not so big an issue, there are more serious things in life.

Last edited by berbae (2010-07-18 15:59:28)

bharani · 2010-07-18 16:46:51

berbae wrote:

After some researches, I found that the 'browser.cache.disk_cache_ssl' option of Firefox has no effect if set to 'true' instead of the default 'false'.
I found that it is caused by the 'Pragma: no-cache' directive in the response-head of the Forums pages. That directives doesn't permit the caching of the pages even if Firefox could permit it.

Will this addon work for you?

mrunion · 2010-07-19 00:02:27

Yeah, berbae -- I hate that it doesn't "remember" where I came from when reading the forums. Kinds screws it up for me. It's not my forum, though, so I'll either have to live with it or read less.

fsckd · 2010-07-19 19:47:52

Why don't you guys file a bug report with Mozilla? They may never fix it but at least it should be out there.

(I have no such problems with the browsers I use.)

mrunion · 2010-07-20 02:54:40

They way I understood it, it was not a browser issue. The browser is respecting the HTTPS protocol and not caching things. I definitely could be wrong.

I still think it's complete overkill to encrypt data that's publicly available. It's not my forum, though.

Xyne · 2010-07-20 04:53:52

mrunion wrote:

I still think it's complete overkill to encrypt data that's publicly available. It's not my forum, though.

Login details are not publicly available. HTTPS allows users to safely use proxies and Tor to access this server (which might apply e.g. behind university or company firewalls or in countries with quirky or harsh censorship laws... Arch is international, after all). It also assures users that the data they send and receive will not be tampered with, even if there is no perceptible risk of someone doing so in the first place (see my post here for an example of ISPs actually considering inserting headers into your data stream for the sake of advertisement revenue).

Arch Linux

#1 2010-07-17 21:50:52

Is it possible to use the Forums in non encrypted mode ?

#2 2010-07-17 21:56:20

Re: Is it possible to use the Forums in non encrypted mode ?

#3 2010-07-17 22:08:06

Re: Is it possible to use the Forums in non encrypted mode ?

#4 2010-07-17 22:09:27

Re: Is it possible to use the Forums in non encrypted mode ?

#5 2010-07-18 11:17:17

Re: Is it possible to use the Forums in non encrypted mode ?

#6 2010-07-18 15:53:01

Re: Is it possible to use the Forums in non encrypted mode ?

#7 2010-07-18 16:46:51

Re: Is it possible to use the Forums in non encrypted mode ?

#8 2010-07-19 00:02:27

Re: Is it possible to use the Forums in non encrypted mode ?

#9 2010-07-19 19:47:52

Re: Is it possible to use the Forums in non encrypted mode ?

#10 2010-07-20 02:54:40

Re: Is it possible to use the Forums in non encrypted mode ?

#11 2010-07-20 04:53:52

Re: Is it possible to use the Forums in non encrypted mode ?

Board footer