No HTTPS?

[longbyte1]

So after the server migration, the link to the forums I've been using for 2 years now was invalidated (https://kerbalspaceprogram.com/forum/forum.php, now returns 404). I remembered just now that that was supposed to redirect me to forum.kerbalspaceprogram.com, but it's strange that the browser didn't warn me that I was stepping down from HTTPS to HTTP for all this time.

When I tried connecting to the forums (the subdomain) through HTTPS, the connection is simply refused.

So why is there SSL for the entire KSP main website but not the forums? Just too expensive to buy a cert, or is there a technical complication?

Edited May 16, 2015 by longbyte1
Caps filter is being dumb again

[KasperVld]

It's come up before, but it's not high priority at this point.

[Fel]

I wonder though.

I use a mild-security password for my KSP Download account and a zero-security password for my forum account; I consider forums to be easily hacked and very bad security over all; regardless of using SSL or not. Hence why I detest when forums get full of themselves and try to make you create a "secure password," forum security is notoriously bad, if someone wants to attack the server and get a copy of the hash table, they likely can. And since fast hashes are likely in employ (again, forum "security") it can easily be broken.

Does SQUAD consider the frivolous nature of forum security as reason not to bother with SSL, or is it purely a cost issue?