Parrot Forum - Parrot Owner's Community

Parrot Forum - Parrot Owner's Community (http://www.parrotforums.com/forums.php)
-   Suggestions (http://www.parrotforums.com/suggestions/)
-   -   Upgrade to https? (http://www.parrotforums.com/suggestions/81845-upgrade-https.html)

quackerz 08-27-2019 11:13 PM

Upgrade to https?
 
Hello,

I noticed that this website is using http, which means all forms, username/password are sent in cleartext to the server. A hacker can sniff the traffic and obtain the username and password quite easily.

An SSL certificate (https) is easy to obtain and it encrypts all traffic so sniffing isn't possible. Let's Encrypt is a non-profit certificate authority that's popular among server admins and provides free certificate. Popular linux distros such as debian and centos even have built-in python scripts (certbot) to automate the process, which only takes seconds.

I host my own websites so I'm kinda experienced with these stuff. I'm happy to help with the process.

wrench13 08-27-2019 11:18 PM

Re: Upgrade to https?
 
I think the host for our forum might have to agree to it. We dont 'own' Parrotforums. The admin folks will know for sure. Good ifea though, my companyis all https. Good suggestion.,lets see what they say.

Scott 08-28-2019 11:17 AM

Re: Upgrade to https?
 
Not feasible at the moment. Link to prior discussion, last post is explanation from our Administrator: http://www.parrotforums.com/technica...n-logging.html

quackerz 08-28-2019 03:42 PM

Re: Upgrade to https?
 
Quote:

Originally Posted by Scott (Post 826115)
Not feasible at the moment. Link to prior discussion, last post is explanation from our Administrator: http://www.parrotforums.com/technica...n-logging.html

Have they considered a reverse proxy like nginx or apache? The SSL is handled at the reverse proxy layer and VB3 would still receive unencrypted data from the localhost reverse proxy server. Theoretically it doesn't need to change a lot at all.

Scott 08-28-2019 04:28 PM

Re: Upgrade to https?
 
I don't have the background to intelligently discuss server systems or software. The Admin's most recent post from the link serves as guidance until amended.


All times are GMT -5. The time now is 02:06 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2020, vBulletin Solutions, Inc.