Deprecating Non-Secure HTTP – Mozilla Security Blog
@PitaJ Thanks, it is actually not the issue of NodeBB, it is the decision on which strategy to choose. Anyway, I've done no worse than before, that is enough.
Test the out image links:
outlinks
Mozilla to deprecate HTTP
-
Quite exciting, especially with the impending release of Let's Encrypt...
It's worth mentioning that this isn't Mozilla dropping support for HTTPS, but rather them disallowing certain features unless HTTPS is enabled.
... things like WebRTC!
-
I am glad they are deprecating http. It is a horrible protocol with how "easy" it is to setup https. I know the first thing I am doing when I spin up my nodeBB forums is to get nginx setup for https all the time.
Now hopefully nodeBB will offer https on their $35 hosted plan... I was looking at doing hosted but don't need the mid-level plan yet, and no https makes me sad.
-
@teh_g Good idea... tell you what -- we can offer SSL for all hosted NodeBB instances. It ought to be standard, so we may as well do it.
However, we can't extend this to all domains, just those under the
nodebb.comdomain. Still interested? -
@julian said:
@teh_g Good idea... tell you what -- we can offer SSL for all hosted NodeBB instances. I ought to be standard, so we may as well do it.
However, we can't extend this to all domains, just those under the
nodebb.comdomain. Still interested?That is amazing! If I hadn't gotten a cert and a domain name a few weeks ago I would 100% be interested. Maybe next year when the cert is up for renewal I will have enough members to justify the more expensive domain!
-
The domain is not tied to hosting, actually
You can still point a domain name to a NodeBB instance hosted by us. -
@julian said:
The domain is not tied to hosting, actually
You can still point a domain name to a NodeBB instance hosted by us.I may send you guys a few questions about the package or make a new thread to ask them in lieu of hijacking this topic. The solution I setup for a test box last night is cheaper, but a hosted option takes a lot of burden off of me. If I can bring my own domain and possibly even a cert, I would totally be sold on the smaller plan.
I am definitely all for more https everywhere, hopefully the two things in the OP will make https more prevalent across all of the internet.
-
Yes, you can definitely use your own domain and SSL. We don't have tools to automate this at the moment, so you'll have to open up a support ticket and send us your certificate. Then we can configure your instance appropriately.
-
@julian said:
Yes, you can definitely use your own domain and SSL. We don't have tools to automate this at the moment, so you'll have to open up a support ticket and send us your certificate. Then we can configure your instance appropriately.
You guys rock. Let me see if the the group I am setting this up for can donate some money. Going from $5 a month to $35 a month is a bit more than I wanted to spend, but it will be wicked helpful to not have to administer it. I am glad I am planning to move from myBB to NodeBB, seems like I made the right choice!
