MantisBT - Documentation, Examples, and Web Site
View Issue Details
0002057Documentation, Examples, and Web SiteInform7.com Sitepublic2018-04-02 06:462019-11-20 04:15
DavidG 
 
highserioushave not tried
confirmedopen 
 
 
0002057: inform7.com is not using SSL/TLS
Given that we're logging onto this site, it's pretty important that it be secured from snoopers. I recommend https://github.com/srvrco/getssl [^] as it's very lightweight and has essentially no dependencies.
No tags attached.
Issue History
2018-04-02 06:46DavidGNew Issue
2018-04-03 20:09zarfNote Added: 0004769
2018-04-03 20:09zarfStatusnew => confirmed
2019-11-12 20:01pchimentoNote Added: 0004894
2019-11-20 04:15mattweinerNote Added: 0004895

Notes
(0004769)
zarf   
2018-04-03 20:09   
Confirmed, obviously.

I believe the site is on Dreamhost, so activating SSL is just a checkbox on the admin panel. (Free, now that letsencrypt.org exists.)
(0004894)
pchimento   
2019-11-12 20:01   
This can be a bit scary for people accessing the site; for example I posted "inform7.com/mantis" into the intfiction forum, which automatically added "https://" [^] to it. Accessing the site via a https link will put up a big banner in most browsers telling you the site is not secure and you have to "accept the risk" to continue.
(0004895)
mattweiner   
2019-11-20 04:15   
I only just saw the thread about this on intfiction.org. Is this something I should alert Emily (and thus Graham) about?