HTTPS and SSL certificates

[paradoxbound 13]

Hello,

 

hope this is the right place for this but I wondered if it would be possible to add HTTPS and an SSL cert to STEP. Letsencrypt do a free automated cert service and updating the certs are handled with a simple script running under cron. I have used them myself for a while now and it has never failed to renew the certs in time.

https://letsencrypt.org/

[LordOfLA 0]

I would second this - both Firefox and Chrome will start warning users that sites not using SSL are unsafe very soon if not already. It doesn't take long to setup LetsEncrypt SSL using EFF's CertBot on Linux/BSD servers.

[z929669 81]

It's a possibility once we switch servers.

[TechAngel85 73]

We were using lets encrypt.

[LordOfLA 0]

There are two free methods of providing SSL, lets encrypt and cloudflare. The latter is easier than the former. Not sure why foot dragging is occuring.

[paradoxbound 13]

There are two free methods of providing SSL, lets encrypt and cloudflare. The latter is easier than the former. Not sure why foot dragging is occuring.

The site is undergoing a major redevelopment, with new hardware, forum software and integration with Mod Picker. I am willing to wait for SSL/TLS to be included in that work. If you are concerned use a long unique password for STEP. I personally use a 24 character random string set by a password manager, which is certainly going to take longer to crack than my lifetime.

[TechAngel85 73]

What paradoxbound said.

 

Though it's still several months out, we are in the mists of a total rebuild of the project. New server, updated software across the board, a switch to Mod Picker as our framework for the Guide and Packs, a new front-end website, and more. Depending on the time it takes to finish, we may or may not spin out a new SSL for the current site. However, since our server admin has gone MIA, I'm uncertain if we even have access to update it.

[Mator 80]

we may or may not spin out a new SSL for the current site.

 

I'll make sure to set SSL up, it's a priority, in my opinion.

 

Also, midst*, not mists.  :)

Edited November 12, 2017 by Mator