Dingoonity.org

Dingoonity => Suggestions => Topic started by: gameblabla on March 24, 2017, 09:34:21 pm

Title: HTTPS Let's Encrypt
Post by: gameblabla on March 24, 2017, 09:34:21 pm
I find it quite disappointing that Dingoonity still doesn't support HTTPS,
especially since that Let's Encrypt now offers free certificates for everyone and a cpanel plugin is available as well.

This has numerous benefits :
- People will be able to add youtube videos to their posts without downgrading to http
- In public wifi spots and Tor nodes, this means that it will no longer be possible to snoop on people and steal their asswords.
(very easy to do with Wireshark)

Please, consider doing it.
It should very easy to do if you have admin access to the host.
Title: Re: HTTPS Let's Encrypt
Post by: omgmog on March 27, 2017, 10:03:32 am
I might consider it in the future, but right now it's not a priority.

Right now any time spent improving/developing/hosting the site is entirely out of my own pocket as nobody has donated in the past 3 or so years.
Title: Re: HTTPS Let's Encrypt
Post by: gameblabla on May 18, 2017, 11:42:49 pm
come on, donate some monez to omgomg :<
(i can't do it myself since paypal banned me, beats me why)
Title: Re: HTTPS Let's Encrypt
Post by: Excalibur on June 09, 2017, 01:11:31 pm
Right now any time spent improving/developing/hosting the site is entirely out of my own pocket as nobody has donated in the past 3 or so years.

@omgmog I sent you a PM.
Title: Re: HTTPS Let's Encrypt
Post by: Excalibur on June 19, 2017, 04:51:15 pm
Can always use CloudFlare's DNS and free Flexible SSL too. That ought to solve the problem pretty quickly.
Title: Re: HTTPS Let's Encrypt
Post by: omgmog on August 17, 2017, 09:40:29 am
Can always use CloudFlare's DNS and free Flexible SSL too. That ought to solve the problem pretty quickly.

Yep I've been doing that elsewhere for a while.

I've finally found some time to get around to switching Dingoonity over to Cloudflare, and using Cloudflare's SSL

Seems to be working alright so far, though there will be a lot of mixed/insecure content warnings as this is a forum and people embed images from wherever, however they like  ::)

Let me know if any of you spot any obvious issues.
Title: Re: HTTPS Let's Encrypt
Post by: Excalibur on August 17, 2017, 11:12:37 am
CloudFlare has a feature to rewrite the mixed urls, actually. You should enable it.


Sent from my iPhone using Tapatalk Pro
Title: Re: HTTPS Let's Encrypt
Post by: gameblabla on August 17, 2017, 03:53:50 pm
Thanks a lot @omgomg !
I can confirm it works properly on my side.
(For mixed content, i use noscript to force everything to use https)