Am Thu, 7 Nov 2013 09:34:41 +0100 schrieb Thijs van severen <thijsvanseve...@gmail.com>:
> hi Wolke > > IMHO we should upgrade to the latest version (provided it is stable of > course) > > reading your mail it seems that there is quite a bit of work to be done. > is this something that several people can work on simultaneously ? yes:) > can we do it in a number of phases or does it have to be done all at once ? we can do this in a number of phases. > are we looking for people with drupal experience, or can 'anyone' help out ? i think everyone can help with a little bit cms experience. > > https : what are the real benefits of using https over http ? i mean it's > not that we are uploading confidential info, so ... (or is it a matter of > protecting the passwords ?) https secure login name and password. currently we transfer this information (login.php) encrypted via https. if we use here the normal http protocol this user informations are simple to catch. this is not really save. mostly users on forums like this use a trash password only for low level services. but also there are users which play with their good passwords which they also use on critical web services. you know.... in moment we play very secure with user data. we transfer passwords via https and also we save them as hash in database. this make sure that nobody can read user passwords. also people with database access can only see the password hash.this hash cannot decrypted. it is only possible to compare hashes. the question here is more. handle users on one's own authority? or is this task on our site? > if we do switch to http : will this affect links that are currently used in > the forum or on other pages on the site ? will the links still work ? > > also : i'm a bit worried that the NSA will hack our site if we stop using > https ;-) :) some weeks ago i read that nsa can decrypt 256bit keys in realtime. don't know if this is true. but if yes ???? :) > > grtz > Thijs > > > > 2013/11/6 m.wolkst...@gmx.de <m.wolkst...@gmx.de> > > > hi, > > our website is a little bit outdated. drupal 6.2 is really old. also we > > have some > > technical problems with drupal core/mudeles. for example the site search. > > imo, it is time to update the system. there are two choices. stay on > > drupal 6 and update > > all core and modules to the last 6 series state. or update drupal to 7.xx. > > or the > > newest 8.xx which will released soon. both procedures require much time. > > > > in case one (stay at 6) our own modifications on some drupal core and > > module files need a > > lot of afterwork because this files will override during update. > > also some modules we use are marked as deprecated. they maybe don't work > > correctly after > > an update. that's why i never perform an update till now. > > > > in case two (update to 7 or 8) we have to migrate the old content and > > forum. there are > > some drupal helper modules available which make this work more easy. but > > at last it will > > be much work to get it working. > > > > imo, if we really decide to to spend spare time fore some love on h2 web > > site we can > > directly jump to newest version. > > > > what did you think? > > > > also i am unsure if we really need the https protocol. we have many > > problems with > > drupal because this. as you know, we only can use one certificate for > > https because we > > have only one ip address. this means all sites on our server share this > > certificate on > > one ip using some tricky apache rewrites. in case of drupal we also need > > modifications > > on drupal core to get it working. this end in update problems because this > > modifications > > are lost after an core update. also we permanently fight with strange > > address. you know > > hydrogen-music.org will switch to secure.popez.org/hcms if we use https > > protocol. this is > > not so nice. currently we use https for login procedure and for administer > > the site. did > > we really need this? > > > > what did you think? > > > > best > > wolke > > > > > > ------------------------------------------------------------------------------ > > November Webinars for C, C++, Fortran Developers > > Accelerate application performance with scalable programming models. > > Explore > > techniques for threading, error checking, porting, and tuning. Get the most > > from the latest Intel processors and coprocessors. See abstracts and > > register > > http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk > > _______________________________________________ > > Hydrogen-devel mailing list > > Hydrogen-devel@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/hydrogen-devel > > > > > ------------------------------------------------------------------------------ November Webinars for C, C++, Fortran Developers Accelerate application performance with scalable programming models. Explore techniques for threading, error checking, porting, and tuning. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk _______________________________________________ Hydrogen-devel mailing list Hydrogen-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/hydrogen-devel
