HTTPS please

Use this forum for title suggestions, bitching at moderators, whining about phpBB, and grand ideas that will solve all of Song Fight's problems.

Moderator: Mods

User avatar
Manhattan Glutton
Zora
Posts: 1475
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

HTTPS please

Postby Manhattan Glutton » Mon Apr 18, 2016 5:42 am

IIRC, the forum is hosted on DreamHost. DreamHost has a single button you can click to automatically register with Let's Encrypt - a free certificate authority.

Since we are sending our passwords in plaintext to the forum, it would be kind of nice, I suppose, if we could leverage this free and easy solution. Could the person(s) who have access to the DreamHost panel click the button? (and even if it's not on DreamHost, you can still get a free cert)
User avatar
jb
Notable Hylian
Posts: 3507
Joined: Sat Sep 25, 2004 10:12 am
Instruments: Guitar, Cello, Keys, Uke, Vox, Perc
Recording Method: Logic X
Submitting as: The John Benjamin Band
Location: WASHINGTON, DC
Contact:

Re: HTTPS please

Postby jb » Mon Apr 18, 2016 7:07 am

I clicked the button. Says it'll take a bit to get set up. I'll post if I see something. If it's more than clicking that button I'm coming after you Mike. ;)

J
User avatar
jb
Notable Hylian
Posts: 3507
Joined: Sat Sep 25, 2004 10:12 am
Instruments: Guitar, Cello, Keys, Uke, Vox, Perc
Recording Method: Logic X
Submitting as: The John Benjamin Band
Location: WASHINGTON, DC
Contact:

Re: HTTPS please

Postby jb » Mon Apr 18, 2016 9:33 am

it appears to be working now.

JB
User avatar
Manhattan Glutton
Zora
Posts: 1475
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

Re: HTTPS please

Postby Manhattan Glutton » Mon Apr 18, 2016 9:55 am

Neat! Thanks, jb.

I know I said just one button :), but it may also be useful to (when you have time):
1. if necessary, update any phpBB configuration or links that reference http
2. make a root .htaccess like this to redirect http to https (i have this verbatim):

Code: Select all

RewriteEngine on

# Check for POST Submission
RewriteCond %{REQUEST_METHOD} !^POST$

# Forcing HTTPS
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{SERVER_PORT} 80

#rule
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
User avatar
fluffy
Ganon
Posts: 9307
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Location: The Plaidlands (also, Seattle)
Contact:

Re: HTTPS please

Postby fluffy » Mon Apr 18, 2016 10:36 am

phpBB has its own .htaccess so I had to put the rule in there. And it's in.
User avatar
Manhattan Glutton
Zora
Posts: 1475
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

Re: HTTPS please

Postby Manhattan Glutton » Mon Apr 18, 2016 11:03 am

Don't we love our admins? We love our admins.
Lunkhead
Notable Hylian
Posts: 4996
Joined: Sat Sep 25, 2004 12:14 pm
Instruments: many
Recording Method: cubase/reason/mac/tascam4x4
Submitting as: Berkeley Social Scene, Merisan, Tiny Robots
Location: Berkeley, CA
Contact:

Re: HTTPS please

Postby Lunkhead » Mon Apr 18, 2016 1:30 pm

This is awesome. Thanks admins and squeaky wheel!
User avatar
fluffy
Ganon
Posts: 9307
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Location: The Plaidlands (also, Seattle)
Contact:

Re: HTTPS please

Postby fluffy » Mon Apr 18, 2016 6:04 pm

It's something I'd been wanting to do for a while myself, so thanks MG for raising it as an issue and JB for pressing the button. :)

Return to “Complaints and Suggestions”

Who is online

Users browsing this forum: No registered users and 1 guest