Toytown Germany over HTTPS for security

58 posts in this topic

On 9/20/2016, 9:35:15, Editor Bob said:

HTTPS bitches!

 

On 9/22/2016, 8:52:38, Editor Bob said:

The cert will expire in three months.

 

https.JPG.e28f52db7de420bfe5b6c5701f08a2

 

Think you need to stick another 50 pence in the meter, Editor Bobbles. 

3

Share this post


Link to post
Share on other sites

Really? After all the times TT has been hacked, a secure server is deemed an unnecessary expense?

 

581f13a066468_272b82c92c10ec2d9bde7406ed

3

Share this post


Link to post
Share on other sites

Using a certificate provider that causes some browsers (it did on my smartphone) to choke and demand an exception may have something to do with it. 

0

Share this post


Link to post
Share on other sites
On November 4, 2016 at 17:27:15, Editor Bob said:

Ad revenue drop forced a rollback. Orders from above.

 

Hmmm, wonder why ad revenue dropped? Also wonder how much it cost to better secure the forum?

 

Hope I don't read what we've written here on Wikileaks. :P

 

 

0

Share this post


Link to post
Share on other sites
1 hour ago, Lavender Rain said:

Hmmm, wonder why ad revenue dropped?

 

Decreasing user numbers and businesses not wanting to be associated with what Toytown has become? 

 

Anyways, remember what that Obi Wan Kenobi said about Toytown?

 

 

:lol:

1

Share this post


Link to post
Share on other sites

Getting a "site is not safe message" from Chrome saying the site certificate has run out since yesterday - rather a PITA having to navigate chrome each and every page

0

Share this post


Link to post
Share on other sites

I updated the certificate earlier this morning, but forgot to restart the web server for it to take effect. It's fixed now.

1

Share this post


Link to post
Share on other sites

Indeed it is, well done that man.

0

Share this post


Link to post
Share on other sites

I feel for you. I'm using Let's Encrypt on my websites, too. It's annoying having to restart the web server every three months!

 

 

0

Share this post


Link to post
Share on other sites
34 minutes ago, yourkeau said:

I'm using Let's Encrypt on my websites, too. It's annoying having to restart the web server every three months!

 

Use an auto-renewal tool...

0

Share this post


Link to post
Share on other sites

Or don't be cheapskates and buy real certificates instead of using self-signed certificates or free Let's Encrypt ones.

0

Share this post


Link to post
Share on other sites

Nothing wrong with using Let's Encrypt if you've got the scripts setup to automatically get the new certs and inform your server to use them.

1

Share this post


Link to post
Share on other sites

Let's Encrypt is an initiative by Mozilla, CISCO, Akamai and gazillion of other IT companies to increase the number of websites using SSL. Their certificates are recognized by all browsers, they are not inferior to paid ones. The only disadvantage is 3 months validity. But, as phranco wrote, that's not a big deal if you configure your renewals. 

 

I see no sense in buying certificate unless its price is included in the domain hosting package.

0

Share this post


Link to post
Share on other sites

Buying certificates still makes sense in a number of situations.

  • You need extended validation instead of just domain validation
    • This means that the certificate authority is actually verifying that the company behind the site is being verified instead of just the domain.  This way you get a nice green bar as well.
  • Your site/infrastructure isn't directly available on the internet and you don't want to go through the hassle of dealing with let's encrypt in that setup.  (It's possible, but a hassle)
  • I'm sure there are numerous others that aren't popping up at the moment.
1

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now