Setup https on forums.debian.net

Here you can discuss every aspect of Debian. Note: not for support requests!

Setup https on forums.debian.net

Postby goldyfruit » 2020-01-24 15:19

Hi guys,

We are leaving in an era where SSL/TLS is trying to be everywhere, maybe it's time for this forum to be SSL friendly.
Let's Encrypt provides free SSL certificates and certbot makes everything very simple to setup for Apache/Nginx.

What do you think guys?
goldyfruit
 
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Re: Setup https on forums.debian.net

Postby arzgi » 2020-01-24 15:52

Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.
arzgi
 
Posts: 661
Joined: 2008-02-21 17:03
Location: Finland

Re: Setup https on forums.debian.net

Postby goldyfruit » 2020-01-24 15:54

arzgi wrote:Same idea has popped up here a few times during last decade. Conclusion has been it would not be worth, this is only user forum.

But people are authenticating with credentials to this forum.
goldyfruit
 
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Re: Setup https on forums.debian.net

Postby Chrisdb » 2020-01-26 07:58

Chrisdb
 
Posts: 273
Joined: 2018-04-10 07:16

Re: Setup https on forums.debian.net

Postby Head_on_a_Stick » 2020-01-26 11:47

If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.

And not everybody agrees that https should be universal: http://n-gate.com/software/2017/07/12/0/
Black Lives Matter

Debian buster-backports ISO image: for new hardware support
User avatar
Head_on_a_Stick
 
Posts: 12650
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Setup https on forums.debian.net

Postby HuangLao » 2020-01-26 17:22

SSL has gone the route of "higher education", once its universal it has lost any/all meaning and relevance, then they create a new "higher level". PhDdD anyone, that will allow you to flip burgers one day.
User avatar
HuangLao
 
Posts: 485
Joined: 2015-01-27 01:31

Re: Setup https on forums.debian.net

Postby goldyfruit » 2020-01-27 18:37

OK, then...
goldyfruit
 
Posts: 15
Joined: 2006-09-15 00:22
Location: Montréal

Re: Setup https on forums.debian.net

Postby Hallvor » 2020-01-27 20:39

Head_on_a_Stick wrote:If people are using the same password here that they use elsewhere then they only have themselves to blame when they get hacked.


Fair enough, but just maybe sending the credentials of your user account in clear text, is a bad idea everywhere. On a public network, it is almost like sending a postcard with your e-mail address and password on it.
Lenovo ThinkPad T440S, Intel Core i7-4600U CPU @ 2.10GHz, 8 GB RAM, 256 GB SSD, Debian Buster (KDE)
Lenovo ThinkPad X240, Intel Core i5-4300U CPU @ 2.90GHz, 8 GB RAM, 120 GB SSD, Debian Buster (KDE)
User avatar
Hallvor
 
Posts: 1079
Joined: 2009-04-16 18:35
Location: Norway

Re: Setup https on forums.debian.net

Postby Head_on_a_Stick » 2020-01-28 18:12

Hallvor wrote:sending the credentials of your user account in clear text, is a bad idea everywhere

+1

But as the owners of the server are in absentia there doesn't seem to be much we can do about that, apart from not logging in at all.
Black Lives Matter

Debian buster-backports ISO image: for new hardware support
User avatar
Head_on_a_Stick
 
Posts: 12650
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Setup https on forums.debian.net

Postby Thoma11s » 2020-03-11 08:22

When sending the form to the https server you instead download the source to the script TalkToWendys.
Last edited by Thoma11s on 2020-05-21 12:52, edited 1 time in total.
Thoma11s
 
Posts: 1
Joined: 2020-03-11 08:21

Re: Setup https on forums.debian.net

Postby Deb-fan » 2020-03-11 08:56

Use the https everywhere extension on Firefox, Chrome/ium, Opera ... Apparently works on a few others. Haven't used it outside of playing around with the thing on FF. Don't know if it'd even work on this site and you've got mixed content http/https, not ideal but maybe something more than as is now. Something to recommend to people concerned about this perhaps. :)

PS, doesn't work on FF mobile no locky thing in address bar, maybe no webextension version yet? May work on others. Took a shot and FaiL!, arghhh.
Most powerful FREE tech-support tool on the planet * HERE. *
Deb-fan
 
Posts: 954
Joined: 2012-08-14 12:27

Re: Setup https on forums.debian.net

Postby NFT5 » 2020-03-11 09:54

Amazes me that not one of the posters, here or in the other thread(s), calling for https on this forum, has volunteered to do the work necessary and bear the cost of the change.
User avatar
NFT5
 
Posts: 401
Joined: 2014-10-10 11:38
Location: Canberra, Australia


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 11 guests

fashionable