HTTPS for the secure bits of Discourse?


#1

Went to go set a password for my account on here, but apparently it’s sent in the clear?


#2

And I need to learn to read before opening my mouth to yap-- it’s in the cards. :-p


#3

Getting “proper” ssl is on the “eventually” card just because it’s such
a hassle and we need to coordinate many moving parts to get that to
work.

Creating a self-signed ssl cert isn’t on any of the cards yet. That’s
probably important to do soon.

Texel noreply@discourse.emacsconf.org writes:


#4

I’m happy to help with this. I favor using ssl for evvvvvverything (not just “secure bits”) and have set it up lots of times with apache. I haven’t done it with nginx but it’s always a good time for me to figure out how.