Page 1 of 1
HTTPS please
Posted: Mon Apr 18, 2016 5:42 am
by Manhattan Glutton
IIRC, the forum is hosted on DreamHost. DreamHost has a single button you can click to automatically register with
Let's Encrypt - a free certificate authority.
Since we are sending our passwords in plaintext to the forum, it would be kind of nice, I suppose, if we could leverage this free and easy solution. Could the person(s) who have access to the DreamHost panel click the button? (and even if it's not on DreamHost, you can still get a free cert)
Re: HTTPS please
Posted: Mon Apr 18, 2016 7:07 am
by jb
I clicked the button. Says it'll take a bit to get set up. I'll post if I see something. If it's more than clicking that button I'm coming after you Mike.
J
Re: HTTPS please
Posted: Mon Apr 18, 2016 9:33 am
by jb
it appears to be working now.
JB
Re: HTTPS please
Posted: Mon Apr 18, 2016 9:55 am
by Manhattan Glutton
Neat! Thanks, jb.
I know I said just one button
, but it may also be useful to (when you have time):
1. if necessary, update any phpBB configuration or links that reference http
2. make a root .htaccess like this to redirect http to https (i have this verbatim):
Code: Select all
RewriteEngine on
# Check for POST Submission
RewriteCond %{REQUEST_METHOD} !^POST$
# Forcing HTTPS
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{SERVER_PORT} 80
#rule
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
Re: HTTPS please
Posted: Mon Apr 18, 2016 10:36 am
by fluffy
phpBB has its own .htaccess so I had to put the rule in there. And it's in.
Re: HTTPS please
Posted: Mon Apr 18, 2016 11:03 am
by Manhattan Glutton
Don't we love our admins? We love our admins.
Re: HTTPS please
Posted: Mon Apr 18, 2016 1:30 pm
by Lunkhead
This is awesome. Thanks admins and squeaky wheel!
Re: HTTPS please
Posted: Mon Apr 18, 2016 6:04 pm
by fluffy
It's something I'd been wanting to do for a while myself, so thanks MG for raising it as an issue and JB for pressing the button. :)