4 ms·
No forced TLS, and when I manually enter https most of the resources try to load over http. c'mon, you've done the hard part of getting TLS, now you just need t
by finnn 11y ago
No forced TLS, and when I manually enter https most of the resources try to load over http. c'mon, you've done the hard part of getting TLS, now you just need to make your home page aware.
EDIT: when I sign up it POSTs my password IN THE CLEAR. what year are we in?
- eob 11y agoHi finnn -- we're on it!
- finnn 11y agoWhile you're getting it brought up to current security standards, may I suggest not using GoDaddy for anything, including as a certificate authority, and fixing the issues with your actual SSL configuration (https://www.ssllabs.com/ssltest/analyze.html?d=buttstitch.io https://www.ssllabs.com/ssltest/analyze.html?d=buttstitch.io) EDIT: Here's a handy guide to configuring your SSL https://mozilla.github.io/server-side-tls/ssl-config-generator/ https://mozilla.github.io/server-side-tls/ssl-config-generat...
- jonlucc 11y agoButtstitch?
- finnn 11y agoFuck! Correct link: https://www.ssllabs.com/ssltest/analyze.html?d=cloudstitch.io https://www.ssllabs.com/ssltest/analyze.html?d=cloudstitch.i...
- leesalminen 11y ago+1 for cloud2butt!