FetLife Employee Directory

That's why we're the first social network to be 100% SSL. The same security banks use. There's a lot that's wrong with that. First of all, Google+ did it before FetLife (and FetLife even said so in their announcement of SSL support). But second, simply having SSL isn't enough. It's a complicated technology, and there's a lot that can be done wrong... in ways that jeopardize the security of it. Second, it's only one part of the security of a site. Think of it this way: you can install a really fancy, expensive, impossible-to-pick lock on your front door... but if you leave all of your windows wide open, it's going to be useless. Having a good lock is necessary for security of your home, but many other things are necessary too. SSL is the same way. (The XSS and CSRF bugs, in fact, were totally independent of SSL"they'd work just fine with or without it.)Read More