[Joey]

Google Chrome v50 will not support certain HTML5 features on non-HTTPS sites (like NWH).

The only info I have seen on this point is:
https://blogs.esri.com/esri/arcgis/2016/04/14/increased-web-api-security-in-google-chrome/

Not sure if this change in Chrome will affect NWH but sooner or later I expect most sites will need to convert to HTTPS.

Converting my domains (Gmap4, etc) is my #1 priority since my map software uses browser geolocation and that is on the list of features that Chrome will soon not support unless the website uses HTTPS.

Edit: I have no clue if embedded Gmap4 maps on NWH will still work after I convert to HTTPS.

[Damian]

This will require an environmental impact statement.  NWHikers is also on the register of historic websites.  No changes are allowed  .

[Jaberwock]

Hope the admins start using something like http://flarum.org soon..

[puzzlr]

EFF has made it possible to automate free certificates for HTTPS via Lets Encrypt. I don't agree with Google's attempt to coerce all websites in the world to use HTTPS, but at least there's now a relatively easy and free way to do it. Some one should estimate the additional energy consumed by an HTTPS internet vs a HTTP one. It's not an insignificant difference, but invisible because of the very fast processors we have today.

--------------
Mid Fork Rocks • flickr

[Joey]

[christensent]

[Joey]

Here is a federal site with lots of good info.
The homepage says that all federal websites are required to be https by the end of 2016.

https://https.cio.gov/

[markh752]

[Joey]

Of course converting to https has nothing to do with changing the software running the forum.  The two things are different issues.

[Joey]

Naturally for a technical topic like HTTPS the "best practices" are a bit of a moving target.  Thus it is easy to read articles online without realizing the info is out-of-date.

With that in mind, I am going to put in another plug for this federal site:
https://https.cio.gov/

Here are two videos they produced:

The first video is non-technical and makes the case for why all websites should move to HTTPS.  They make the point that "Pervasive monitoring is an attack".  When you use your computer/tablet/phone to access a website that has implemented HTTPS then 99.9999% of the traffic back and forth between your device and that website is encrypted thus preventing any pervasive monitoring.

[trestle]

Another vote against a flarum-type forum format. Leave the Hasbro interface for the children.

Another suggestion:  please avoid CloudFlare for security. They're terrible!

--------------
"Life favors the prepared." - Edna Mode

[IanB]