Author Topic: HTTPS Let's Encrypt  (Read 1489 times)

gameblabla (OP)

  • *
  • Posts: 465
HTTPS Let's Encrypt
« on: March 24, 2017, 09:34:21 pm »
I find it quite disappointing that Dingoonity still doesn't support HTTPS,
especially since that Let's Encrypt now offers free certificates for everyone and a cpanel plugin is available as well.

This has numerous benefits :
- People will be able to add youtube videos to their posts without downgrading to http
- In public wifi spots and Tor nodes, this means that it will no longer be possible to snoop on people and steal their asswords.
(very easy to do with Wireshark)

Please, consider doing it.
It should very easy to do if you have admin access to the host.

omgmog

  • * Administrator
  • Doesn't sleep.
  • Posts: 715
    • omgmog.net
Re: HTTPS Let's Encrypt
« Reply #1 on: March 27, 2017, 10:03:32 am »
I might consider it in the future, but right now it's not a priority.

Right now any time spent improving/developing/hosting the site is entirely out of my own pocket as nobody has donated in the past 3 or so years.

gameblabla (OP)

  • *
  • Posts: 465
Re: HTTPS Let's Encrypt
« Reply #2 on: May 18, 2017, 11:42:49 pm »
come on, donate some monez to omgomg :<
(i can't do it myself since paypal banned me, beats me why)

Excalibur

  • *
  • Posts: 77
Re: HTTPS Let's Encrypt
« Reply #3 on: June 09, 2017, 01:11:31 pm »
Right now any time spent improving/developing/hosting the site is entirely out of my own pocket as nobody has donated in the past 3 or so years.

@omgmog I sent you a PM.
Ek-skal-uh-ber

Excalibur

  • *
  • Posts: 77
Re: HTTPS Let's Encrypt
« Reply #4 on: June 19, 2017, 04:51:15 pm »
Can always use CloudFlare's DNS and free Flexible SSL too. That ought to solve the problem pretty quickly.
Ek-skal-uh-ber

omgmog

  • * Administrator
  • Doesn't sleep.
  • Posts: 715
    • omgmog.net
Re: HTTPS Let's Encrypt
« Reply #5 on: August 17, 2017, 09:40:29 am »
Can always use CloudFlare's DNS and free Flexible SSL too. That ought to solve the problem pretty quickly.

Yep I've been doing that elsewhere for a while.

I've finally found some time to get around to switching Dingoonity over to Cloudflare, and using Cloudflare's SSL

Seems to be working alright so far, though there will be a lot of mixed/insecure content warnings as this is a forum and people embed images from wherever, however they like  ::)

Let me know if any of you spot any obvious issues.

Excalibur

  • *
  • Posts: 77
Re: HTTPS Let's Encrypt
« Reply #6 on: August 17, 2017, 11:12:37 am »
CloudFlare has a feature to rewrite the mixed urls, actually. You should enable it.


Sent from my iPhone using Tapatalk Pro
Ek-skal-uh-ber

gameblabla (OP)

  • *
  • Posts: 465
Re: HTTPS Let's Encrypt
« Reply #7 on: August 17, 2017, 03:53:50 pm »
Thanks a lot @omgomg !
I can confirm it works properly on my side.
(For mixed content, i use noscript to force everything to use https)

 

Post a new topic