Page 1 of 3

SSL in Debian Forums

PostPosted: 2015-05-28 09:28
by jesus92gz
Hello.

Website: forum
Severity: wishlist

I have noticed that while other websites in Debian are SSL secured, the forum is not.

Is there any possibility to secure the forum with SSL?

Re: SSL in Forums

PostPosted: 2015-05-28 13:32
by levlaz
I didn't even realize that this was the case.

+1 for SSL

Re: SSL in Debian Forums

PostPosted: 2015-05-29 19:37
by Sarge-in-charge
jesus92gz wrote:Is there any possibility to secure the forum with SSL?

I vote NO if it's going to be with a self-signed certificate or with a certificate chained up to a CA not by default in Firefox.

Otherwise, I vote YES.

Re: SSL in Debian Forums

PostPosted: 2015-05-29 19:50
by Head_on_a_Stick
Why does this matter?

Re: SSL in Debian Forums

PostPosted: 2015-05-29 22:02
by Head_on_a_Stick
Sorry, I meant: why does it matter if the forums use SSL?

Re: SSL in Debian Forums

PostPosted: 2015-05-30 06:18
by roseway
Anyone who uses the same password on a public forum as they use for something confidential is asking for trouble anyway. SSL is pointless on a forum like this.

Re: SSL in Debian Forums

PostPosted: 2015-05-30 11:32
by Sarge-in-charge
roseway wrote:SSL is pointless on a forum like this.

This is so wrong on many levels.

No HTTP traffic should be sent on the clear. Period. That's just the way it is in the post-Snowden era.

Re: SSL in Debian Forums

PostPosted: 2015-06-01 16:05
by levlaz
Once this is live we should just use it. It costs nothing and works in any browser.

https://letsencrypt.org/

Re: SSL in Debian Forums

PostPosted: 2015-06-03 15:39
by levlaz
Honestly after thinking about this some more I think there is no excuse to not have a valid SSL certificate. I will buy (and if needed configure) the SSL cert for this site, does anyone know who we need to talk to in order to make this happen?

Re: SSL in Debian Forums

PostPosted: 2015-06-08 13:15
by jesus92gz
Head_on_a_Stick wrote:Why does this matter?


Apart from the previous users' replies, I can see the Debian site is using SSL everywhere.
For example:
Official Site: https://debian.org/
Wiki: https://wiki.debian.org/
...

Why should the forum not use SSL as well?

Re: SSL in Debian Forums

PostPosted: 2015-06-08 15:23
by jesus92gz
wizard10000 wrote:forums.debian.net isn't an official Debian resource.


Really? I thought it was.
Anyways, I think supporting SSL could improve the security of the forums to the end users. Just in case.

Re: SSL in Debian Forums

PostPosted: 2015-06-09 03:46
by kolker
it not a end of the world thing but imo it should be a default on all sites. this is not because some thing sensative is happening per se or anything its just a good policy for all comunications.

Re: SSL in Debian Forums

PostPosted: 2015-08-03 11:41
by dotlj

Re: SSL in Debian Forums

PostPosted: 2015-08-14 00:33
by millpond
Personally, I would love to have the NSA listen to what I have to say about systemd.

Re: SSL in Debian Forums

PostPosted: 2016-02-22 03:07
by Chiefahol
+1

You know mint just got their website completely owned. :shock:

It's probably time to use HTTPS on the main website and forums.

What's the delay about? :mrgreen: