World Community Grid - View Thread - Please use a secure connection (https) for BOINC communication

World Community Grid Forums

Category: Support

Forum: Suggestions / Feedback

Thread: Please use a secure connection (https) for BOINC communication

Quick Go »

No member browsing this thread

Thread Status: Active
Total posts in this thread: 6

[ ]

Author

This topic has been viewed 2132 times and has 5 replies

gQuigs
Cruncher
Joined: Dec 3, 2005
Post Count: 4
Status: Offline
Project Badges:

180 day badge for Nutritious Rice for the World

14 day badge for The Clean Energy Project

180 day badge for Help Cure Muscular Dystrophy - Phase 2

45 day badge for The Clean Energy Project - Phase 2

1 year badge for Computing for Clean Water

45 day badge for Drug Search for Leishmaniasis

45 day badge for GO Fight Against Malaria

14 day badge for Uncovering Genome Mysteries

45 day badge for Outsmart Ebola Together

90 day badge for Microbiome Immunity Project

90 day badge for OpenPandemics - COVID-19


Please use a secure connection (https) for BOINC communication

This website uses HTTPS, but the actual BOINC communication does not appear to use HTTPS for WCG. It does for many other projects though.

If I understand correctly this means WCG can't run on newer android? (https://github.com/BOINC/boinc/issues/2466)

It also does introduce an easily mitigated vector to PCs that are donating their time.

[Nov 26, 2020 8:26:03 AM]

Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline


Re: Please use a secure connection (https) for BOINC communication

My latest with EMUI 11 fitted android can't. Thousands upon thousands have tagged this as wish listed.

[Nov 26, 2020 1:26:16 PM]

gQuigs
Cruncher
Joined: Dec 3, 2005
Post Count: 4
Status: Offline
Project Badges:


Re: Please use a secure connection (https) for BOINC communication

I noted you now have HSTS on the website indicating you take it seriously for the browser. Let's make the URL in the client HTTPS too.

[Oct 1, 2021 5:10:06 PM]

knreed
Former World Community Grid Tech
Joined: Nov 8, 2004
Post Count: 4504
Status: Offline
Project Badges:

180 day badge for Human Proteome Folding

90 day badge for Human Proteome Folding - Phase 2

45 day badge for Help Cure Muscular Dystrophy - Phase 2

90 day badge for Computing for Clean Water

180 day badge for FightAIDS@Home - Phase 2

1 year badge for Microbiome Immunity Project

1 year badge for Africa Rainfall Project

180 day badge for OpenPandemics - COVID-19


Re: Please use a secure connection (https) for BOINC communication

Unfortunately, the BOINC client makes this change difficult. Please see the discussion here: https://www.worldcommunitygrid.org/forums/wcg/viewthread_thread,43774

[Oct 1, 2021 7:50:04 PM]

gQuigs
Cruncher
Joined: Dec 3, 2005
Post Count: 4
Status: Offline
Project Badges:


Re: Please use a secure connection (https) for BOINC communication

Awesome! Thanks for leading this. Newer versions can upgrade to HTTPS without issue - https://github.com/BOINC/boinc/commit/b695ca2c05c42814bd832d17134dfefd4c9969ac

Unfortunately, I just found out that BOINC has some issues with some certs since Sept 30th - see https://github.com/BOINC/boinc/issues/4530. I'd encourage people to upgrade once they release a new version -then do the transition some time after.

Are you able to see what client versions are connecting?

[Oct 2, 2021 6:54:11 AM]

gQuigs
Cruncher
Joined: Dec 3, 2005
Post Count: 4
Status: Offline
Project Badges:


Re: Please use a secure connection (https) for BOINC communication

The Windows version 7.6.20 should make the http->https seamless.

Mac/Linux users would still have to do the detach/re-attach dance.

[Nov 28, 2021 7:15:40 AM]

[ ]