3100 posts
  • Located in Australia
  • Helps us moderate the forums
  • Has been part of the Envato Community for over 5 years
  • Helped several times protecting Envato Market against copyright violations
+16 more
dtbaker Moderator says

Oh dear, imagine the issues if the marketplace was all SSL? every author would have to get SSL hosting to post images on the forums and within item descriptions/faq/comments. And if the live previews were left as is every author would need to get SSL hosting otherwise browsers would report security issues. And every existing image on the forum or item page would need to be moved over to an SSL hosting otherwise the site would report security issues left right and centre * hides * no thanks!

SSL on signin rocks. This is how FB did it for years without dramas. Much more secure now. Thanks again devs !

3012 posts
  • Has sold $1+ on Envato Market
  • Has collected 50+ items on Envato Market
  • Sells items exclusively on Envato Market
  • Has been a beta tester for an Envato feature
+2 more
TNL3542 says

i dont know why.. after i sign in on the secure site.. with username and password.. it goes away.. it should always stay a secure connection even after you sign in

2636 posts Community Team
  • Member of the Envato Team
  • Helped several times protecting Envato Market against copyright violations
  • Contributed a tutorial on Tuts+
  • Attended one of our Meetups around the world
+18 more
contrastblack Envato team says

i dont know why.. after i sign in on the secure site.. with username and password.. it goes away.. it should always stay a secure connection even after you sign in

that’s pretty much what everyone is going on about. Once you pass the login phase, you’re out of the SSL zone. That being said, reading up on dtbakers comment, I’m somewhat inclined to think that the SSL implementation across the marketplaces won’t actually be as easy as many think it would be.

556 posts
  • Has been part of the Envato Community for over 4 years
  • Has sold $1,000+ on Envato Market
  • Won a Most Wanted contest
  • Has been a beta tester for an Envato feature
+4 more
kriskorn says

i dont know why.. after i sign in on the secure site.. with username and password.. it goes away.. it should always stay a secure connection even after you sign in

As said, only the sign-in process is secure now. The whole marketplace will get an SSL when everything is ready, as Dave said on last page.

10 posts
  • Has been part of the Envato Community for over 2 years
  • Has sold $10,000+ on Envato Market
  • Has collected 10+ items on Envato Market
  • Sells items exclusively on Envato Market
+1 more
GambitTech says

Oh dear, imagine the issues if the marketplace was all SSL? every author would have to get SSL hosting to post images on the forums and within item descriptions/faq/comments.

This indeed would be a huge problem

484 posts
  • Has been part of the Envato Community for over 6 years
  • Has referred 100+ members
  • Has sold $40,000+ on Envato Market
  • Has been a beta tester for an Envato feature
+6 more
omarabid says
SSL on signin rocks. This is how FB did it for years without dramas. Much more secure now. Thanks again devs !

I agree that implementing SSL is a mess with all that externally linked content. But how is SSL on sign-in makes things secure?

13 posts
  • Has been part of the Envato Community for over 2 years
  • Located in Australia
dgoodlad says

I agree that implementing SSL is a mess with all that externally linked content. But how is SSL on sign-in makes things secure?

It makes things more secure than they were. It’s a compromise; it prevents sniffing plain-text passwords, it prevents cookie hijacking on that domain, etc. You’re right, though, there are well-known attack vectors against login-only-SSL, and this is a serious concern for us. For my part, I’ll be applying some internal pressure to address this issue, but there is a lot of work to be done to get there!

— Dave

844 posts
  • Has been part of the Envato Community for over 4 years
  • Has referred 1+ members
  • Has sold $1,000+ on Envato Market
  • Has been a beta tester for an Envato feature
+2 more
SBJEWEL says

Done…

Now we are completely secure i hope…. :D

30 posts
  • Has been part of the Envato Community for over 2 years
  • Has sold $100+ on Envato Market
  • Has collected 1+ items on Envato Market
  • Sells items exclusively on Envato Market
+1 more
Interspace says

Safari sign-in on Mac working fine now. Thanks.

1039 posts
  • Has referred 200+ members
  • Has sold $125,000+ on Envato Market
  • Has collected 50+ items on Envato Market
  • Elite Author: Sold more than $75,000 on Envato Market
+9 more
Pixelworkshop says

Changing password doesn’t seem to work for me.

by
by
by
by
by
by