HTTPS for the secure bits of Discourse?


Went to go set a password for my account on here, but apparently it’s sent in the clear?


And I need to learn to read before opening my mouth to yap-- it’s in the cards. :-p


Getting “proper” ssl is on the “eventually” card just because it’s such
a hassle and we need to coordinate many moving parts to get that to

Creating a self-signed ssl cert isn’t on any of the cards yet. That’s
probably important to do soon.

Texel writes:


I’m happy to help with this. I favor using ssl for evvvvvverything (not just “secure bits”) and have set it up lots of times with apache. I haven’t done it with nginx but it’s always a good time for me to figure out how.