https

[zappa222]

Any reason the site isn't served over TLS?

 

[ModBot]

Using a self-signed certificate does not make sense and we haven't purchased a commercial certificate.

 

[comfreak]

Since Let's Encrypt is out now and publicly serving certificates, why not change it now? I know it says "Public Beta" but from my experience and the experience of many others it is stable and what could be unstable about a certificate anyways?

I tried it on my servers and it is a matter of maybe 10-15 minutes. Just run a client which sets up the certificates which can even change the webserver's configuration to the proper values. You will be surprised about how quick and easy it is.

But if you want to go beta-free, I can recommend StartSSL and their free SSL certificates. I am using their services for over 2 years now and they never let me down.

I think it would be worth it, since sending passwords over cleartext is not a good practice and a lot of people reuse passwords which makes them vulnerable to other people sniffing their traffic and then using their password on other sites.

I would really appreciate it.
Thanks for any answers!

 

[comfreak]

Another article on the topic to clear up some questions for people who think they "still don't need HTTPS":

https://scotthelme.co.uk/still-think-you-dont-need-https/

 

[MacMan]

The site is now all https thanks to the folks at Let's Encrypt

 

[comfreak]

The site is now all https thanks to the folks at Let's Encrypt

Welcome to 2016

This is amazing news, now I can finally feel more comfortable sending my password through the internet..
Thanks for the work!

 

[adamsmasher]