HTTPS please

Use this forum for title suggestions, bitching at moderators, whining about phpBB, and grand ideas that will solve all of Song Fight's problems.
Post Reply
User avatar
Manhattan Glutton
Ice Cream Man
Posts: 1530
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

HTTPS please

Post by Manhattan Glutton »

IIRC, the forum is hosted on DreamHost. DreamHost has a single button you can click to automatically register with Let's Encrypt - a free certificate authority.

Since we are sending our passwords in plaintext to the forum, it would be kind of nice, I suppose, if we could leverage this free and easy solution. Could the person(s) who have access to the DreamHost panel click the button? (and even if it's not on DreamHost, you can still get a free cert)
User avatar
jb
Hot for Teacher
Posts: 4159
Joined: Sat Sep 25, 2004 10:12 am
Instruments: Guitar, Cello, Keys, Uke, Vox, Perc
Recording Method: Logic X
Submitting as: The John Benjamin Band
Pronouns: he/him
Location: WASHINGTON, DC
Contact:

Re: HTTPS please

Post by jb »

I clicked the button. Says it'll take a bit to get set up. I'll post if I see something. If it's more than clicking that button I'm coming after you Mike. ;)

J
blippity blop ya don’t stop heyyyyyyyyy
User avatar
jb
Hot for Teacher
Posts: 4159
Joined: Sat Sep 25, 2004 10:12 am
Instruments: Guitar, Cello, Keys, Uke, Vox, Perc
Recording Method: Logic X
Submitting as: The John Benjamin Band
Pronouns: he/him
Location: WASHINGTON, DC
Contact:

Re: HTTPS please

Post by jb »

it appears to be working now.

JB
blippity blop ya don’t stop heyyyyyyyyy
User avatar
Manhattan Glutton
Ice Cream Man
Posts: 1530
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

Re: HTTPS please

Post by Manhattan Glutton »

Neat! Thanks, jb.

I know I said just one button :), but it may also be useful to (when you have time):
1. if necessary, update any phpBB configuration or links that reference http
2. make a root .htaccess like this to redirect http to https (i have this verbatim):

Code: Select all

RewriteEngine on

# Check for POST Submission
RewriteCond %{REQUEST_METHOD} !^POST$

# Forcing HTTPS
RewriteCond %{HTTPS} !=on [OR]
RewriteCond %{SERVER_PORT} 80

#rule
RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
User avatar
fluffy
Eruption
Posts: 11028
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Pronouns: she/they
Location: Seattle-ish
Contact:

Re: HTTPS please

Post by fluffy »

phpBB has its own .htaccess so I had to put the rule in there. And it's in.
User avatar
Manhattan Glutton
Ice Cream Man
Posts: 1530
Joined: Tue Feb 15, 2005 12:10 pm
Instruments: Angst
Recording Method: REAPER
Location: Madison, WI
Contact:

Re: HTTPS please

Post by Manhattan Glutton »

Don't we love our admins? We love our admins.
User avatar
Lunkhead
You're No Good
Posts: 8104
Joined: Sat Sep 25, 2004 12:14 pm
Instruments: many
Recording Method: cubase/mac/tascam4x4
Submitting as: Berkeley Social Scene, Merisan, Tiny Robots
Pronouns: he/him
Location: Berkeley, CA
Contact:

Re: HTTPS please

Post by Lunkhead »

This is awesome. Thanks admins and squeaky wheel!
User avatar
fluffy
Eruption
Posts: 11028
Joined: Sat Sep 25, 2004 10:56 am
Instruments: sometimes
Recording Method: Logic Pro X
Submitting as: Sockpuppet
Pronouns: she/they
Location: Seattle-ish
Contact:

Re: HTTPS please

Post by fluffy »

It's something I'd been wanting to do for a while myself, so thanks MG for raising it as an issue and JB for pressing the button. :)
Post Reply