Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Setup https on forums.debian.net

Here you can discuss every aspect of Debian. Note: not for support requests!
Post Reply
Message
Author
goldyfruit
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Setup https on forums.debian.net

#1 Post by goldyfruit »

Hi guys,

We are leaving in an era where SSL/TLS is trying to be everywhere, maybe it's time for this forum to be SSL friendly.
Let's Encrypt provides free SSL certificates and certbot makes everything very simple to setup for Apache/Nginx.

What do you think guys?

arzgi
Posts: 1185
Joined: 2008-02-21 17:03
Location: Finland
Been thanked: 31 times

Re: Setup https on forums.debian.net

#2 Post by arzgi »

Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.

goldyfruit
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Re: Setup https on forums.debian.net

#3 Post by goldyfruit »

arzgi wrote:Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.
But people are authenticating with credentials to this forum.

Chrisdb
Posts: 279
Joined: 2018-04-10 07:16

Re: Setup https on forums.debian.net

#4 Post by Chrisdb »


User avatar
Head_on_a_Stick
Posts: 14114
Joined: 2014-06-01 17:46
Location: London, England
Has thanked: 81 times
Been thanked: 132 times

Re: Setup https on forums.debian.net

#5 Post by Head_on_a_Stick »

If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.

And not everybody agrees that https should be universal: http://n-gate.com/software/2017/07/12/0/
deadbang

User avatar
HuangLao
Posts: 485
Joined: 2015-01-27 01:31
Been thanked: 1 time

Re: Setup https on forums.debian.net

#6 Post by HuangLao »

SSL has gone the route of "higher education", once its universal it has lost any/all meaning and relevance, then they create a new "higher level". PhDdD anyone, that will allow you to flip burgers one day.

goldyfruit
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Re: Setup https on forums.debian.net

#7 Post by goldyfruit »

OK, then...

User avatar
Hallvor
Global Moderator
Global Moderator
Posts: 2029
Joined: 2009-04-16 18:35
Location: Kristiansand, Norway
Has thanked: 139 times
Been thanked: 206 times

Re: Setup https on forums.debian.net

#8 Post by Hallvor »

Head_on_a_Stick wrote:If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.
Fair enough, but just maybe sending the credentials of your user account in clear text, is a bad idea everywhere. On a public network, it is almost like sending a postcard with your e-mail address and password on it.
[HowTo] Install and configure Debian bookworm
Debian 12 | KDE Plasma | ThinkPad T440s | 4 × Intel® Core™ i7-4600U CPU @ 2.10GHz | 12 GiB RAM | Mesa Intel® HD Graphics 4400 | 1 TB SSD

User avatar
Head_on_a_Stick
Posts: 14114
Joined: 2014-06-01 17:46
Location: London, England
Has thanked: 81 times
Been thanked: 132 times

Re: Setup https on forums.debian.net

#9 Post by Head_on_a_Stick »

Hallvor wrote:sending the credentials of your user account in clear text, is a bad idea everywhere
+1

But as the owners of the server are in absentia there doesn't seem to be much we can do about that, apart from not logging in at all.
deadbang

Thoma11s
Posts: 1
Joined: 2020-03-11 08:21

Re: Setup https on forums.debian.net

#10 Post by Thoma11s »

When sending the form to the https server you instead download the source to the script TalkToWendys.
Last edited by Thoma11s on 2020-05-21 12:52, edited 1 time in total.

Deb-fan
Posts: 1047
Joined: 2012-08-14 12:27
Been thanked: 4 times

Re: Setup https on forums.debian.net

#11 Post by Deb-fan »

Use the https everywhere extension on Firefox, Chrome/ium, Opera ... Apparently works on a few others. Haven't used it outside of playing around with the thing on FF. Don't know if it'd even work on this site and you've got mixed content http/https, not ideal but maybe something more than as is now. Something to recommend to people concerned about this perhaps. :)

PS, doesn't work on FF mobile no locky thing in address bar, maybe no webextension version yet? May work on others. Took a shot and FaiL!, arghhh.
Most powerful FREE tech-support tool on the planet * HERE. *

User avatar
NFT5
df -h | grep > 20TiB
df -h | grep > 20TiB
Posts: 597
Joined: 2014-10-10 11:38
Location: Canberra, Australia
Has thanked: 10 times
Been thanked: 43 times

Re: Setup https on forums.debian.net

#12 Post by NFT5 »

Amazes me that not one of the posters, here or in the other thread(s), calling for https on this forum, has volunteered to do the work necessary and bear the cost of the change.

Post Reply