Security nonsense.

[Bookmem]

I know people are very security minded today, but I think browsers that only allow access to https sites are nonsense. Why should a site that only GIVES information, and doesn't require any, need to be https? If a user isn't sending info to the site, what is the need for encryption? I have my own site that allows anyone to brows my Karaoke library. There is no login requirement, so the only info is what the user puts in for their song search criteria. Why do I have to pay an additional $50/yr to get an SSL certificate?

[securitybreach]

You can get a free SSL from let's encrypt, they are reputable and been around for many years https://letsencrypt.org/

 

As far as why a site should never be without SSL: https://https.cio.gov/everything/

[Bookmem]

1 hour ago, securitybreach said:

You can get a free SSL from let's encrypt, they are reputable and been around for many years https://letsencrypt.org/

 

As far as why a site should never be without SSL: https://https.cio.gov/everything/

The problem is that I'm not using a webhosting site with cPanel or Wordpress or "shell access". I'm hosting my own site on a home desktop using Xampp. And with Xampp I only have Apache activated. No SQL database or anything else. I use only a txt file for my data. So how do I "demonstrate control over the domain"?

[Bookmem]

4 hours ago, securitybreach said:

You can get a free SSL from let's encrypt, they are reputable and been around for many years https://letsencrypt.org/

 

As far as why a site should never be without SSL: https://https.cio.gov/everything/

It took me 3hrs but at least I now know how to do it. Had to move to my Mint box, install apache2 and php and then certbox apache plugin and certbox and run

sudo certbox --apache. Now my site is https and no longer says "unsafe". Thanks for the letsencrypt site.

[securitybreach]

1 hour ago, Bookmem said:

It took me 3hrs but at least I now know how to do it. Had to move to my Mint box, install apache2 and php and then certbox apache plugin and certbox and run

sudo certbox --apache. Now my site is https and no longer says "unsafe". Thanks for the letsencrypt site.

 

Very cool

[securitybreach]

Also check out certbot to auto renew your cert:  https://wiki.archlinux.org/title/Certbot

[Bookmem]

12 minutes ago, securitybreach said:

Also check out certbot to auto renew your cert:  https://wiki.archlinux.org/title/Certbot

Just need to run sudo certbot --apache again and there is the option to renew. One of my original fears about free certs was that they had to be renewed so often. But if that is all it takes then "no problamo". 

[securitybreach]

This isn't just free, its endorsed by the EFF (Electronic Frontier Foundation). They are the leading nonprofit defending digital privacy, free speech, and innovation..