Forum Index > Support & Feedback > Missing SSL certificate
Previous :: Next Topic  
Author Message
zimmertr
TJ Zimmerman



Joined: 24 Jun 2018
Posts: 23 | TRs
Location: Seattle
zimmertr
  Top

TJ Zimmerman
PostMon Jan 07, 2019 1:02 pm 
Reply to topic Reply with quote
Hello, NWHikers does not currently have an active SSL certificate. This opens a lot of pretty dangerous security issues that could compromise the future of this forum. I am a system engineer so I can assist in configuring the site with an SSL certificate if needed.

If funding is a problem, Lets Encrypt offers free SSL certificates and the procedure is automated via many tools. One of which is certbot. https://certbot.eff.org/
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Jaberwock
Member
Member


Joined: 30 Jan 2013
Posts: 669 | TRs
Location: Bellingham
Jaberwock
  Top

Member
PostMon Jan 07, 2019 8:09 pm 
Reply to topic Reply with quote
Maybe you could help Tom move to Flarum while you're at it?
Back to top
View user's profile Search for posts by this user Send private message Reply to topic Reply with quote
neek
Member
Member


Joined: 12 Sep 2011
Posts: 572 | TRs
Location: Seattle, WA
neek
  Top

Member
PostTue Jan 08, 2019 10:09 am 
Reply to topic Reply with quote
Early beta, written by a kid in med school?  Hmm...

Login creds are sent in cleartext, so no one should use the same password elsewhere.  (Of course you shouldn't do this anyway.)  HTTPS would be a good first step, but can be expensive.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
zimmertr
TJ Zimmerman



Joined: 24 Jun 2018
Posts: 23 | TRs
Location: Seattle
zimmertr
  Top

TJ Zimmerman
PostTue Jan 08, 2019 11:04 am 
Reply to topic Reply with quote
I agree that a forum software migration isn't in order but it is trivial to add a free SSL certificate to a website that is automatically rotated with a cronjob. And I would be willing to help as well, of course.

It's not an exercise in moderate security. It's a necessity on the modern internet.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
Tom
Admin



Joined: 15 Dec 2001
Posts: 15608 | TRs

Tom
  Top

Admin
PostTue Jan 08, 2019 12:45 pm 
Reply to topic Reply with quote
I can look into it.  Have some other priorities right now (preserving a half million flickr images).  And yeah, not moving to flarum (looked good a few years ago but there are better options out there).
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
zimmertr
TJ Zimmerman



Joined: 24 Jun 2018
Posts: 23 | TRs
Location: Seattle
zimmertr
  Top

TJ Zimmerman
PostTue Jan 08, 2019 12:47 pm 
Reply to topic Reply with quote
Good luck Tom. frown.gif Sounds rough.
Back to top
View user's profile Search for posts by this user Send private message Send e-mail Reply to topic Reply with quote
  Display:     All times are GMT - 8 Hours
Forum Index > Support & Feedback > Missing SSL certificate
  Happy Birthday newdawnfades, sconey!
Jump to:   
Search this topic:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum
   Use Disclaimer Powered by phpBB Privacy Policy