General > Other Discussion

Meta: Why no https for login?

(1/2) > >>

quickshot:
This is a forum meta bug: Why do we have to send our login credentials unencrypted (via http, instead of https)?

Phil Harvey:
Well, for one thing I'm not running an https server on this machine.

But I don't know if SMF is able to do this.

- Phil

Edit: Also, I think this would require me to get a certificate for the HTTPS server, which I know would be a pain in the ass because it has a limited lifetime and would have to be updated regularly.

stephane-gourichon:
Hi all, hi Phil.

Big thanks for making exiftool and maintaining it. Been using it for a long time, it is very comprehensive (and thanks for citing Saint-Exupéry and the need to keep things minimal).
I just subscribed to the forum and browsed a little before I'll talk about what motivates my visit here (hint: write some external code that provides higher level features on top of exiftool).


--- Quote from: Phil Harvey on April 15, 2019, 07:31:40 AM ---Well, for one thing I'm not running an https server on this machine.

But I don't know if SMF is able to do this.

--- End quote ---

Yes, it is able, see for example Re: Is it possible to make your forum HTTPS...? « Reply #1 on: May 17, 2017, 05:21:13 PM » With 2.0.14 it completely is.

I'm aware this is nowhere near a hint as to how to do it. Since you were able to setup SMF without https, and the main site with https, I guess you can do it.


--- Quote from: Phil Harvey on April 15, 2019, 07:31:40 AM ---Edit: Also, I think this would require me to get a certificate for the HTTPS server, which I know would be a pain in the ass because it has a limited lifetime and would have to be updated regularly.

--- End quote ---

For my servers I use letsencrypt.org and am satisfied. After the initial setup it can update itself for an unlimited period of time.

From their home page:

> Let’s Encrypt is a free, automated, and open Certificate Authority.

Oh, I see you already use it for the main site. Maybe "great minds think alike". :-)

Thanks again and keep up the good work!

Phil Harvey:
The main site is Linux and I'm not the administrator for that system.  This forum is on my Mac.

Andrei Korzhyts:

--- Quote ---This forum is on my Mac
--- End quote ---
Does it never turn off? Just at home on the table?

Navigation

[0] Message Index

[#] Next page

Go to full version