forum security

Suggestions and feedback for Linux Mint and the forums
Forum rules
Do not post support questions here. Before you post read: Where to post ideas & feature requests
Post Reply
endafresh

forum security

Post by endafresh »

Here's an idea. How about encrypting the login at least? Is that too much to ask?
Goodness forbid we have encrypted forum browsing/posting in the aftermath of GLOBAL CYBERWARFARE by police-state govts that give as much a damn about citizen rights and constitutions as we do about paper towels.

Encrypt your forum logins. Now.
You have no damn excuse. Free SSL certificates are available from legit Certificate Authorities if you do a simple search.
Use OpenSSL, updated to the latest version. Really.
Last edited by xenopeek on Wed Apr 16, 2014 11:46 am, edited 1 time in total.
Reason: split from http://forums.linuxmint.com/viewtopic.php?f=0&t=83314 and moved here
cyb3rc0de

Re: forum security

Post by cyb3rc0de »

endafresh wrote: Free SSL certificates are available from legit Certificate Authorities if you do a simple search.
Not really. Only StartCom offers free SSL certificate. Theres no other company which will offer SSL cert without you playing.
endafresh

Re: forum security

Post by endafresh »

Nope.
A quick search revealed the following results.

http://www.freessl.com/
http://www.startssl.com/
https://www.ssl.com/certificates/free (90 day free trial certificates)
https://www.godaddy.com/ssl/ssl-open-source.aspx (open source certificate, specifically for projects such as GNU/Linux and these forums would easily qualify)
http://www.cacert.org/ (free certificates based on a community-trusted root CA)

I could probably find a bit more if i did some more searching.
Next time you answer, do a quick search beforehand.
This forum needs to be secured with proper credentials and a certificate is easy/free to obtain. There is no excuse, especially for a major open-source project like Linux Mint.
cyb3rc0de

Re: forum security

Post by cyb3rc0de »

endafresh wrote:Nope.
A quick search revealed the following results.

http://www.freessl.com/
http://www.startssl.com/
https://www.ssl.com/certificates/free (90 day free trial certificates)
https://www.godaddy.com/ssl/ssl-open-source.aspx (open source certificate, specifically for projects such as GNU/Linux and these forums would easily qualify)
http://www.cacert.org/ (free certificates based on a community-trusted root CA)

I could probably find a bit more if i did some more searching.
Next time you answer, do a quick search beforehand.
This forum needs to be secured with proper credentials and a certificate is easy/free to obtain. There is no excuse, especially for a major open-source project like Linux Mint.

Bolded lines represent certificate resellers who only give trials. You might be able to get SSL free for like 90 days or something, but you will still have to pay. Yes I did good research before I commented because I wanted to put SSL on my website.
Son, you should get well informed, trial doesn't mean its free forever.
User avatar
linx255
Level 5
Level 5
Posts: 668
Joined: Mon Mar 17, 2014 12:43 am

Re: forum security

Post by linx255 »

What of this?

I don't think certificates are worth much if "trusted" CAs just give out certs to anyone who can bribe and extort them, etc.
I don't know if this is still an issue or not. Hard to imagine it's not but I'm not an expert on certificates.

http://www.wired.com/2010/03/packet-forensics/
- I'm running Mint 18 Mate 64-bit
- 4.15.0-34-generic x86_64
- All my bash scripts begin with #!/bin/bash
Post Reply

Return to “Suggestions & Feedback”