Why no HTTPS support?


#1

Hi,

When I try to connect to https://www.tribler.org in Firefox I get the following warning:

Your connection is not secure
The owner of www.tribler.org has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

This creates a really bad impression for a website dedicated to software promoting privacy and anonymity !
Would it not be a good idea to configure https correctly on your site ? I notice another user asking the same question back in August 2015, your response makes reference to the cost of a certificate. Might I suggest using http://letsencrypt.org, it free !

Thanks,
Mike


#2

Could be better (my Firefox doesn’t complaint though).

https://www.ssllabs.com/ssltest/analyze.html?d=www.tribler.org

We are already using letsencrypt for other services, the main site has comodo cert valid till 2018 so we didn’t bother migrating it. I’ll do that now.

Thanks for the heads up!


#3

Done!

https://www.ssllabs.com/ssltest/analyze.html?d=www.tribler.org&latest

Looking good! :smiley:


#4

The main page(tribler.org) supports https, but this forum(forum.tribler.org) doesn’t support https!


#5

No, the forums don’t support https yet. I haven’t had time to look at how to integrate letsencrypt with the docker container where the forums are running.


#6

Ok, I had a fight with it and the forums have ssl support enabled now. Enjoy!