| Hello everyone. About a year ago I made mention that we were working on adding HTTPS/SSL support to MyAnimeList. I’m pleased to announce that it’s finally here! At approximately midnight tomorrow (August 17 11:59pm PST) Now, you’ll be able to securely browse MAL through HTTPS. This functionality will also be available for our mobile users. One side effect of this new feature is we will, unfortunately, no longer be able to provide our Daisuki videos for streaming. While we have had a great partnership, their service is not compatible with HTTPS. We hope to see their videos back in the future. Also, in order to allow our 3rd party developers ample time to update their applications, we’ve decided to allow our API to support both HTTP and HTTPS for about 3 weeks. Please update your application(s) as soon as possible. By mid-September, the API endpoints will only use HTTPS. Finally, if you are using any custom userscripts with a browser add-on like TamperMonkey, you may find that your URLs need to be updated to HTTPS. We hope everyone enjoys this added security and that your browsing experience is not hampered in any way. Please let us know if you experience any issues! Update August 18 Our HTTPS transformation sequence is on pause due to technical difficulties. Tune in next week for our final form. The thread will be updated once the new release date has been scheduled. Update August 23 SSL is now live! Update August 25 Trouble logging in? / Getting 400 errors? Please whitelist myanimelist.cdn-dena.com in your script blockers. This is not a 3rd party website (MAL is owned by DeNA). CSS import problems for anime/manga list designs? Please host your CSS file(s) on a website which supports HTTPS (e.g. Dropbox). Unfortunately, it is not possible for us to enable HTTP imports on anime/manga lists. Why doesn't the "secured" symbol appear on profile/forum pages? This is due to mixed content on the pages (images in the About Me / posts which are from non-HTTPS sources). We decided it would be unnecessarily restrictive to require all images embedded by users to come from HTTPS sources. |
KinetaAug 25, 2016 2:43 AM
| holy shit its finally happening you said on your reddit AMA that it will only take 2 months but better late than never XD EDIT: btw do you have plans to change your advertisement partners to a faster loading one? im using an adblocker because of how slow the ads here on MAL are and the ads on the sides takes too much space on my small display/screen that it gives scrolling bars at the bottom i hope ads will improve next so that i can disable adblock here on MAL as well as making the whole site automatically resize depending on the screen size/resolution of the users monitor but thanks for the continued improvements on MAL |
degAug 17, 2016 12:10 AM
| Congrats, y'all |
| Yesss, thank you.. :D |
 read from right to left |
| Thank you and congratulations!! :D |
  "What?" |
| Im glad to hear that sir |
 |
| Thank you very much! |
| Finally!! Good Job! 👍👍 |
 |
| Ooh nice, so it's finally happening. I do have a question though. Will the ssl/tls be implemented along with HSTS? Well, I guess I'll see when the change is made since it's a simple http response header ^^ |
| For those who seek perfection, there can be no rest on this side of the grave. Hope is the first step on the road to disappointment. |
| Hmm... i guess this news is so good that i might as well make my first post on the forums to say thanks. :D Thanks for adding HTTPS! ^^ |
| I should probably make a forum signature someday... |
| *throws confetti* Thank you~ |
| I have no idea what that means. Do I have to do something to keep using MAL? |
 |
crx07 said: it's a nice thing for those who wants security. I believe this is useful to those who don't want their account hacked or those who wants more privacy.You can ignore this thing if you don't care about https, ssl, and safety features. I see, thanks. |
|
| Great work :) |
 |
https://en.wikipedia.org/wiki/HTTPS it should be about encrypting any data traveling between you and the server, so that even if an hacker cuts the cable of your internet line and looks at anything moving on it they won't be able to understand what is being sent :u it's mostly important with wireless connections, since it's very easy to look to what is being transmitted when the data moves in the air |
 Fixes to make the Profile more bearable after "the Modern★Profile★Update★★Rip★Profile★" |
| Very nice! MAL gets bigger and better throughout the years |
 |
| I read about improvement, securely browsing, security so whatever this update means I guess it is a good thing I think. Congrats and great work. |
 Tobacco Causes Severe Health Problems, Smoke Moderately While Respecting Others. |
| Welp, Don't really get it but congrats still! |
 |
| Nice update. |
| Thank you based Xinil and other devs working on MAL. Keep it up. |
 |
| Finally something good! Good job everyone c: |
 set by secret santa ; thank you! ily ♥️ |
| Good job everyone. |
| Just finished updating all my userscripts. Great job! |
| My Userscripts: • Show anime/manga info inside your animelist/mangalist • Other Scripts |
| omedetou :) |
| I don't care |
| Would people even bother hacking a anime list though. You get nothing from it. I just don't understand. |
 |
| So comes the reign of SSLMaster. MasterOfCoin said: You wouldn't imagine. Would people even bother hacking a anime list though. You get nothing from it. I just don't understand. |
| At last! Thank you!! |
 Will this SSJMaster, though? |
 |
| MAL is the best site for updating your list's thanks :) |
 |
| Good job team ! |
| Signature removed. Please follow the signature rules, as defined in the Site & Forum Guidelines. |
BatoKusanagi said: Will this SSJMaster, though? I assume you meant to ask if this will prevent SSJMaster's hijacking attempts. The answer is no. SSJMaster gained access to accounts via phishing, the last I've heard. Secure HTTPS only really prevents man-in-the-middle attacks and eavesdropping by encrypting data, so each individual is not really any safer than they were before if they were to be targeted individually through means such as phishing. |
| Great work! How about responsive design next? The current mobile site is pretty buggy (not to mention that some stuff, like profile descriptions and friends lists aren't visible at all) and so I usually end up using the desktop site on mobile too. |
 |
| finally |
 |
| So a SIX year old suggestion was implemented. Splendid progress MAL keep it up! Edit - RIP Mathematics. |
IizyAug 17, 2016 11:30 AM
 I don't know why people write that they are approachable persons, if you were you wouldn't be on MAL. ---------------------------------------------------------------------------- Extended families or lovers on MAL are a farce. ---------------------------------------------------------------------------- |
Iizbakaokay said: So a sixteen year old suggestion was implemented. Splendid progress MAL keep it up! Six* Anyhow, thanks for the improvement! I'll gladly take it with open arms. :) |
 Forum set made by my secret santa, Nate! |
Zeando said: https://en.wikipedia.org/wiki/HTTPS it should be about encrypting any data traveling between you and the server, so that even if an hacker cuts the cable of your internet line and looks at anything moving on it they won't be able to understand what is being sent :u it's mostly important with wireless connections, since it's very easy to look to what is being transmitted when the data moves in the air thnx for info but lol why would someone hack ur profile , what precious info he gonna get (nothing). u don't buy nothing from mal. |
 |
AllenVonStein said: Zeando said: https://en.wikipedia.org/wiki/HTTPS it should be about encrypting any data traveling between you and the server, so that even if an hacker cuts the cable of your internet line and looks at anything moving on it they won't be able to understand what is being sent :u it's mostly important with wireless connections, since it's very easy to look to what is being transmitted when the data moves in the air thnx for info but lol why would someone hack ur profile , what precious info he gonna get (nothing). u don't buy nothing from mal. yep, on most sites implementing it it's not needed (but people are paranoid and want to feel secure, but don't tell them) expecially since it's about having secure connections, it's not even about hacking profiles, but about what you are sending/receiving to the site what are you sending to the site? -logins -forum posts -list edits -recommendations/reviews ...and other stuff likely where most of them are publicly visible anyway once they are received by the server (login and settings excluded) ...yes, the most sensible information is maybe the login, or the mail used(once one gets in), but even that, doubt anyone is keeping their bank id into their profile notes... i don't think it's to prevent theft of informations(since there aren't any of value), but at most theft of accounts (social medias are sensible to thefts of identity, and since mal is 'socializing' itself..) oh right, there is also the facebook/google/twitter login integration, eavesdropping those means getting two accounts violated at once, oh the progress (mmm, but those should be already under secure connection protocols, so it's not even that) |
ZeandoAug 17, 2016 4:13 PM
Fixes to make the Profile more bearable after "the Modern★Profile★Update★★Rip★Profile★" |
| HOLY SHIT! anybody know exact time for this? |
MasterOfCoin said: Would people even bother hacking a anime list though. You get nothing from it. I just don't understand. You probably weren't around, but it has already happened a few times. That said, thank goodness we're finally getting secure connection. ultravigo said: HOLY SHIT! anybody know exact time for this? Read the post again. j0x said: holy shit its finally happening you said on your reddit AMA that it will only take 2 months but better late than never XD EDIT: btw do you have plans to change your advertisement partners to a faster loading one? im using an adblocker because of how slow the ads here on MAL are and the ads on the sides takes too much space on my small display/screen that it gives scrolling bars at the bottom i hope ads will improve next so that i can disable adblock here on MAL as well as making the whole site automatically resize depending on the screen size/resolution of the users monitor but thanks for the continued improvements on MAL This. The site is pretty hard to use on mobile thanks to the pages never fully loading. |
Toshiya_Aug 17, 2016 6:26 PM
 |
| Finally! About time MAL gets secured! |
| A Little Bit Closer |
| hype! |
 |
| Hurray (finally) ! now a safe place for all shut-ins and introvert otakus :' ) |
 |
| Wow,thank you for this! Any plans for HSTS preloading, or will that occur when the API goes SSL only? |
cwade12cAug 18, 2016 1:35 AM
 |
More topics from this board
» Heavenly Easter Delusion: Devil and Dolce ( 1 2 3 4 5 ... Last Page )Kineta - Mar 27 |
3341 |
by Terra_strong
»»
10 hours ago |
|
» [Challenge] You Should Read This Manga 2024 ( 1 2 3 4 )Kineta - Feb 23 |
197 |
by Avengerlight
»»
Yesterday, 12:38 PM |
|
» New Site Update: Peak Anime 🗻 ( 1 2 3 4 5 )Kineta - Mar 31 |
211 |
by Kauam_
»»
Apr 16, 8:37 AM |
|
» MAL Game "Fantasy Anime League" Opens for Spring 2024 ( 1 2 3 )Kineta - Mar 17 |
144 |
by The_real_maomao
»»
Apr 9, 4:26 PM |
|
» English Titles Added to Desktop; Moving Towards a Romanized/English Toggle ( 1 2 3 )Kineta - Feb 12, 2020 |
121 |
by Vaturna
»»
Apr 4, 5:31 AM |