Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230
Setup https on forums.debian.net
-
- Posts: 15
- Joined: 2006-09-15 00:22
- Location: Montréal
Setup https on forums.debian.net
Hi guys,
We are leaving in an era where SSL/TLS is trying to be everywhere, maybe it's time for this forum to be SSL friendly.
Let's Encrypt provides free SSL certificates and certbot makes everything very simple to setup for Apache/Nginx.
What do you think guys?
We are leaving in an era where SSL/TLS is trying to be everywhere, maybe it's time for this forum to be SSL friendly.
Let's Encrypt provides free SSL certificates and certbot makes everything very simple to setup for Apache/Nginx.
What do you think guys?
Re: Setup https on forums.debian.net
Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.
-
- Posts: 15
- Joined: 2006-09-15 00:22
- Location: Montréal
Re: Setup https on forums.debian.net
But people are authenticating with credentials to this forum.arzgi wrote:Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.
Re: Setup https on forums.debian.net
To spare you the search:
http://forums.debian.net/viewtopic.php?f=12&t=118960
http://forums.debian.net/viewtopic.php?f=12&t=118960
- Head_on_a_Stick
- Posts: 14114
- Joined: 2014-06-01 17:46
- Location: London, England
- Has thanked: 81 times
- Been thanked: 132 times
Re: Setup https on forums.debian.net
If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.
And not everybody agrees that https should be universal: http://n-gate.com/software/2017/07/12/0/
And not everybody agrees that https should be universal: http://n-gate.com/software/2017/07/12/0/
deadbang
Re: Setup https on forums.debian.net
SSL has gone the route of "higher education", once its universal it has lost any/all meaning and relevance, then they create a new "higher level". PhDdD anyone, that will allow you to flip burgers one day.
-
- Posts: 15
- Joined: 2006-09-15 00:22
- Location: Montréal
- Hallvor
- Global Moderator
- Posts: 2029
- Joined: 2009-04-16 18:35
- Location: Kristiansand, Norway
- Has thanked: 139 times
- Been thanked: 206 times
Re: Setup https on forums.debian.net
Fair enough, but just maybe sending the credentials of your user account in clear text, is a bad idea everywhere. On a public network, it is almost like sending a postcard with your e-mail address and password on it.Head_on_a_Stick wrote:If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.
[HowTo] Install and configure Debian bookworm
Debian 12 | KDE Plasma | ThinkPad T440s | 4 × Intel® Core™ i7-4600U CPU @ 2.10GHz | 12 GiB RAM | Mesa Intel® HD Graphics 4400 | 1 TB SSD
Debian 12 | KDE Plasma | ThinkPad T440s | 4 × Intel® Core™ i7-4600U CPU @ 2.10GHz | 12 GiB RAM | Mesa Intel® HD Graphics 4400 | 1 TB SSD
- Head_on_a_Stick
- Posts: 14114
- Joined: 2014-06-01 17:46
- Location: London, England
- Has thanked: 81 times
- Been thanked: 132 times
Re: Setup https on forums.debian.net
+1Hallvor wrote:sending the credentials of your user account in clear text, is a bad idea everywhere
But as the owners of the server are in absentia there doesn't seem to be much we can do about that, apart from not logging in at all.
deadbang
Re: Setup https on forums.debian.net
When sending the form to the https server you instead download the source to the script TalkToWendys.
Last edited by Thoma11s on 2020-05-21 12:52, edited 1 time in total.
Re: Setup https on forums.debian.net
Use the https everywhere extension on Firefox, Chrome/ium, Opera ... Apparently works on a few others. Haven't used it outside of playing around with the thing on FF. Don't know if it'd even work on this site and you've got mixed content http/https, not ideal but maybe something more than as is now. Something to recommend to people concerned about this perhaps.
PS, doesn't work on FF mobile no locky thing in address bar, maybe no webextension version yet? May work on others. Took a shot and FaiL!, arghhh.
PS, doesn't work on FF mobile no locky thing in address bar, maybe no webextension version yet? May work on others. Took a shot and FaiL!, arghhh.
Most powerful FREE tech-support tool on the planet * HERE. *
- NFT5
- df -h | grep > 20TiB
- Posts: 597
- Joined: 2014-10-10 11:38
- Location: Canberra, Australia
- Has thanked: 10 times
- Been thanked: 43 times
Re: Setup https on forums.debian.net
Amazes me that not one of the posters, here or in the other thread(s), calling for https on this forum, has volunteered to do the work necessary and bear the cost of the change.