Website upgrade to HTTPS

Website upgrade to HTTPS

Postby 7Lan2 » 16.06.2019, 16:58

Hi everyone!

I just want to quickly notify everyone here that this website really needs to be upgraded to https. The old http protocol is really insecure, not only are users at risk
but the website itself is also vulnerable.

Upgrading to https doesn't cost anything nowadays and there's also no performance loss. All major browser developers are encouraging website admins to upgrade to
https with the most notable one being Chrome, they have a red warning on the URL bar to indicate that the website is insecure. I also think (I'm not 100% sure) that
Google even de-ranks pages if they're not on HTTPS.

There's a free HTTPS certificate called "Let's encrypt" which I think this website would find useful. Many open-source (free software) projects have secured their websites
with the free Let's encrypt HTTPS certificate.

There's no reason at all to stick with HTTP, please upgade to https as soon as possible!

Here's a link to get started with HTTPS on this webiste: https://www.eff.org/https-everywhere/deploying-https

Thanks for reading/listening.
7Lan2
 
Posts: 2
Joined: 16.06.2019, 16:35

Re: Website upgrade to HTTPS

Postby Dalai » 16.06.2019, 18:14

JFYI: You can already use this website with HTTPS if you change the URL accordingly.

Regards
Dalai
Dalai
 
Posts: 865
Joined: 12.07.2016, 21:00

Re: Website upgrade to HTTPS

Postby boco » 17.06.2019, 00:23

The WOU admin should really enable HSTS for these sites, at least for the forum, to ensure connections are always encrypted.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2145
Joined: 24.11.2009, 17:00
Location: Germany

Re: Website upgrade to HTTPS

Postby 7Lan2 » 17.06.2019, 13:22

Dalai wrote:JFYI: You can already use this website with HTTPS if you change the URL accordingly.

Regards
Dalai


You can? That's good!

But it needs to be default to be secure for everyone. There's lots of private information going about in forums, things like accout logins, private messages and so on.
Everything's readable without encryption.
7Lan2
 
Posts: 2
Joined: 16.06.2019, 16:35

Re: Website upgrade to HTTPS

Postby WSUSUpdateAdmin » 21.06.2019, 15:18

boco wrote:The WOU admin should really enable HSTS for these sites, at least for the forum, to ensure connections are always encrypted.

I should ask my provider for a solution.
There already is an SSL certificate for SVN access to the sources...
WSUSUpdateAdmin
Administrator
 
Posts: 2197
Joined: 07.07.2009, 14:38


Return to Anregungen / Suggestions

Who is online

Users browsing this forum: No registered users and 6 guests