Passwords transmitted as plain text (community.nodebb.org)

psychobunny

Haha @julian promises not to eat lunch until wednesday, and we'll get that cert.

Scuzz

@psychobunny Cant you just self sign one until you can buy one?

finid

Bad idea. Users will just be getting security warning about an untrusted or invalid site certificate that will scare them away.

finid

Comodo has a free, 90-day trial of their SSL cert. See promo here.

julian

Ah, I may as well just buy one. Honestly there's no excuse anymore, SSLs.com has 'em for $5...

frissdiegurke

So you just have to pass a spoon of caviar next lunch

leo

Or you could use StartSSL only for community.nodebb.org, but not sure if that would fall under their "no-commercial" policy.

julian

@leo @tparnell This community is now running over HTTPS.

finid

@julian

Nice. Did you buy from SSLs.com?

julian

Yeah, SSLs.com, which used to be cheapSSLs.com. In my opinion, you do get the same cert for a much lower price, so I didn't see any reason not to go with 'em.

We're looking to introduce SSL support as an add-on for our premium hosting packages (bundled with village & city, extra for hamlets)