Can we get HTTPS support

[admin]

Can we get the site made available over HTTPS (only)? This would provide a level of security and privacy for all users.

security – account details can not be stolen by someone monitoring a users connection such as on public wifi or at work . Esepcially important for mods and admins

privacy – HTTPS would hide what pages (but not the domain) users are looking at.

Thanks to LetsEncrypt this has never been simpler or cheaper (read free) — setup is a 5 minute task (but obviously you’d want to do dry runs first). As the site is on a linux host it’s just a matter of doing a git pull, running a command and setting up a cronjob. If needed there also a number of plugins available.

There can be some worry about performance hits when enabling HTTPS but this has long been shown to be myth, see here, here and here

Edit: apparently I can’t link to lets encrypt, the plugins or the examples of why SSL is not a performance hit so removing them

[Author]

Posts