A discussion.. should smugmug go https?

tsk1979

facebook has done it, google has done it twitter has done it.
Even smugmug supports it partially, login is https protected.

And guess what, even if I go to a gallery, and then replace http by https, it works.

Its just that when I link on any link, it goes back to http.

So can we have a proper https version of smugmug, so that users who want https always, can have https?

I know there is a small overhead, but many behind web filters need to use https anyways, and currently its a little inconvenient(not unworkable).

If a proper https implementation is there, where when I open https://mywebpage.smugmug.com, I can click on any link and everything still stays https, it will be good!

jfriend

As I'm sure Smugmug isn't excited about delivering all images over https, can you describe why you want all communications on https? What security issue are you trying to solve?

tsk1979

jfriend wrote: »

As I'm sure Smugmug isn't excited about delivering all images over https, can you describe why you want all communications on https? What security issue are you trying to solve?

Even if authentication is over https, when you revert back to http with a cookie, man in the middle attack can sniff cookie and hijack your session.
Moreover, if you use https, you are invisible to many web censorship filters which work only on http, not on https sites!