3 replies to this topic

[nigel]

Hi NH admins, forgive this post if you're already aware of this or don't care.  Since SSL/TLS is already configured on the site using a self-signed certificate, the next step of adding a legitimate cert can be accomplished for free from the Electronic Frontier Foundation's https://letsencrypt.org/ project.

 

Thanks for all you do.

[Langley]

What gave you the impression that we have a self-signed certificate? We're on a shared hosting plan, and the server has a self signed certificate for the isp's domain, but we don't have anything configured for nerfhaven.com.  Since we don't deal with credit card transactions or sensitive data, I haven't really been worrying about it.  Thanks for the tip about letsencrypt though, nice to know that the EFF provides that service.

[nigel]

A subtle but important distinction on nerfhaven not having it's own cert.   The only reason I mention it is because people just behave differently when they're observed and TLS helps prevent that.
 

Thanks again for the site, it's very helpful.

[Langley]

I was mainly wondering if you found a link that uses the https:// prefix somewhere on this site or out in the wild.  I don't really get what you mean about being observed.  As far as I understand it, SSL mainly just authenticates the domain and confirms that you're not getting hit with a man-in-the-middle attack.