Passwords transmitted as plain text (community.nodebb.org)

[psychobunny]

Haha @julian promises not to eat lunch until wednesday, and we'll get that cert.

[Scuzz]

@psychobunny Cant you just self sign one until you can buy one?

[finid]

@Scuzz

Bad idea. Users will just be getting security warning about an untrusted or invalid site certificate that will scare them away.

[finid]

Comodo has a free, 90-day trial of their SSL cert. See promo here.

[julian]

Ah, I may as well just buy one. Honestly there's no excuse anymore, SSLs.com has 'em for $5...

[frissdiegurke]

So you just have to pass a spoon of caviar next lunch

[leo]

Or you could use StartSSL only for community.nodebb.org, but not sure if that would fall under their "no-commercial" policy.

[julian]

@leo @tparnell This community is now running over HTTPS.

[finid]

@julian

Nice. Did you buy from SSLs.com?

[julian]

Yeah, SSLs.com, which used to be cheapSSLs.com. In my opinion, you do get the same cert for a much lower price, so I didn't see any reason not to go with 'em.

We're looking to introduce SSL support as an add-on for our premium hosting packages (bundled with village & city, extra for hamlets)