Site access blocked due to password being sent unencrypted.
-
I noticed my AV / FW hates this site due to it not using an encrypted connection when sending data. Not sure if anyone else ran into this but as things become more and more sure we're secure it could become a larger issue.
Then when it's all over and the rest of you are ready for Dead Animal Pickup, I'm gonna go balls deep into Dahl. But only because she asked me to. Sweet-like. - Riddick (2013)
-
@thatonedude We don't use https for MSB because, well, we don't. There shouldn't be any sensitive information here (and if you're sending over some, well, you shouldn't).
Just make sure to not reuse your passwords, which is a good security practice in general, and I won't have to do actual work to implement Let's Encrypt here.
-
@arkandel said in Site access blocked due to password being sent unencrypted.:
I won't have to do actual work to implement Let's Encrypt here.
It takes about 30 seconds using Certbot to setup Lets Encrypt for the web server of your choice. Handles all of the config updates for you. Handles automatic renewals for you.
