Mantis Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0002057Documentation, Examples, and Web SiteInform7.com Sitepublic2018-04-02 06:462019-11-20 04:15
ReporterDavidG 
Assigned To 
PriorityhighSeverityseriousReproducibilityhave not tried
StatusconfirmedResolutionopen 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version 
Summary0002057: inform7.com is not using SSL/TLS
DescriptionGiven that we're logging onto this site, it's pretty important that it be secured from snoopers. I recommend https://github.com/srvrco/getssl [^] as it's very lightweight and has essentially no dependencies.
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
(0004769)
zarf (developer)
2018-04-03 20:09

Confirmed, obviously.

I believe the site is on Dreamhost, so activating SSL is just a checkbox on the admin panel. (Free, now that letsencrypt.org exists.)
(0004894)
pchimento (developer)
2019-11-12 20:01

This can be a bit scary for people accessing the site; for example I posted "inform7.com/mantis" into the intfiction forum, which automatically added "https://" [^] to it. Accessing the site via a https link will put up a big banner in most browsers telling you the site is not secure and you have to "accept the risk" to continue.
(0004895)
mattweiner (reporter)
2019-11-20 04:15

I only just saw the thread about this on intfiction.org. Is this something I should alert Emily (and thus Graham) about?

- Issue History
Date Modified Username Field Change
2018-04-02 06:46 DavidG New Issue
2018-04-03 20:09 zarf Note Added: 0004769
2018-04-03 20:09 zarf Status new => confirmed
2019-11-12 20:01 pchimento Note Added: 0004894
2019-11-20 04:15 mattweiner Note Added: 0004895


Copyright © 2000 - 2010 MantisBT Group
Powered by Mantis Bugtracker