As Anonymous Monk wrote, this is an uplevel decision. PerlMonks is a public site, and the only assets it keeps are the reputations of its members within, and to a certain degree to the outside world - and private scratchpads. Then, of course, the innards of the engine running this site.
Stolen credentials from this site generally aren't an entry point for higher level mischief, as are e.g. credit card numbers and their checksum digits, except for cases were monks reuse their password on this site for logins elsewhere. So there is no need to encrypt the general traffic, but the login process should be diverted to https by default imho.
During all my time here at PerlMonks I have never been impersonated, not even after the famous hack which disclosed a fair number of logins and passwords.
The most important major security improvements necessary for this site are, in my eyes
- transition from plain text password storage to encrypted
- overhaul of the procedure behind What's my password? which would send a new generated password in case of encrypted storage
- a check box in User Settings labelled "allow HTTP login (insecure)" which would not be available to cabalists
These would comprise changes not only to nodes of the everything engine, but also to database tables. As always, the urgent doesn't leave time for the important...
perl -le'print map{pack c,($-++?1:13)+ord}split//,ESEL'
Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
Read Where should I post X? if you're not absolutely sure you're posting in the right place.
Please read these before you post! —
Posts may use any of the Perl Monks Approved HTML tags:
- a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
| |
For: |
|
Use: |
| & | | & |
| < | | < |
| > | | > |
| [ | | [ |
| ] | | ] |
Link using PerlMonks shortcuts! What shortcuts can I use for linking?
See Writeup Formatting Tips and other pages linked from there for more info.