If you’re reading this, then congratulations! You have successfully accessed AnandTech over HTTPS.

I’m pleased to announce that as of this afternoon, all AnandTech pages and websites are now being served over HTTPS, allowing us to offer end-to-end transport encryption throughout the site. This is part of a larger project for us which started with moving the AnandTech Forums over to the XenForo software package and HTTPS last year; now it’s AnandTech main site to receive a security treatment of its own.

This update is being rolled out both to improve the security of the site, and as part of a broader trend in site hosting & delivery. From a site operations point of view, we’ve needed to improve the security of the user login system for some time so that usernames and passwords are better protected, as the two of those items are obviously important. Meanwhile, although AnandTech itself is not sensitive content, the broader trends in website hosting is for all sites regardless of content to move to HTTPS, as end-to-end encryption still enhances user privacy, and that’s always a good thing.

With today’s update, we’re now serving all pages, images, and other local content exclusively over HTTPS. This also includes redirecting any HTTP requests to HTTPS to ensure a secure connection. Overall, the hosting change should be transparent to everyone – depending on your browser, this even eliminates any security warnings – and site performance is virtually identical to before, both on the server side for us and on the client side for you. In other words, a true upgrade in every sense of the word.

However in the unlikely event that you do encounter any issues, please let me know. Leave a note here in the comments, email me, send a tweet, etc. If something is amiss, we want to fix it as quickly as possible.

Finally, I want to quickly thank our long-time developer John Campion, DB guru Ross Whitehead, hosting master Alec Ginsberg, and the rest of the AnandTech/Purch development team for working on this project. While today’s update is transparent at the user level, a lot of work was necessary on the backend to make this as seamless as possible and to make it work with third-party content (ads, JS libraries, etc). So none of this would be possible without their outstanding efforts.

POST A COMMENT

86 Comments

View All Comments

  • ZeDestructor - Wednesday, September 20, 2017 - link

    Because my employer has a modicum of trust in their employees perhaps? Reply
  • prophet001 - Wednesday, September 20, 2017 - link

    Bad idea.

    On average employees are far too ignorant of the hazards involved in the internet.
    Reply
  • prophet001 - Wednesday, September 20, 2017 - link

    Not to mention that when they want you to think they're "suuuuper busieee!! and can't get to nuffinnn rn!!" they're really wasting time on facebook.

    -_-
    Reply
  • ZeDestructor - Wednesday, September 20, 2017 - link

    Doesn't matter what the employee is doing as long as it's 1. not illegal and 2. gets the work done on time. I feel sorry that all your employers have been micromanaging asshats and that all your employees/colleagues can't be trusted to do the work they're paid to do within expected timeframes. Reply
  • Azethoth - Tuesday, September 19, 2017 - link

    Even then, most browsers are starting to do certificate pinning, so good luck with that shitty MITM cert.

    At best the official corporate browser, hacked for surveillance, will work.
    Reply
  • prophet001 - Tuesday, September 19, 2017 - link

    Is there something you don't want your employer to see? Reply
  • nowayandnohow - Monday, September 25, 2017 - link

    We have.

    - Tech department
    Reply
  • darwinosx - Monday, September 18, 2017 - link

    Those people are their because they pay Anandtech to be there. Reply
  • damianrobertjones - Tuesday, September 19, 2017 - link

    Are they 'there', or they are somewhere else? After all their knowledge of the situation is vital. Reply
  • schizoide - Monday, September 18, 2017 - link

    Question, if Google hadn't announced that they will negatively rank all unsecured sites, would you have gone to the effort to do this? Reply

Log in

Don't have an account? Sign up now