New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL Certificate #50

Closed
tsilvia opened this Issue Jun 22, 2014 · 5 comments

Comments

Projects
None yet
2 participants
@tsilvia
Copy link

tsilvia commented Jun 22, 2014

I am looking into adding social login to the site. The issue is that the client has to send the server the access token. It is highly encouraged that SSL is in place to transfer the token to the server securely. I noticed that your site currently doesn't implement SSL.

Is this something you are willing to implement so that the social logins can be implemented responsibly?

@Clidus

This comment has been minimized.

Copy link
Owner

Clidus commented Jun 22, 2014

That sounds fantastic! Thank you!

Yes, adding SSL was certainly on my road map. I will investigate getting a certificate when I get back in a week.

@Clidus Clidus added the enhancement label Jun 28, 2014

@Clidus

This comment has been minimized.

Copy link
Owner

Clidus commented Jun 28, 2014

The cert is being setup. Once this is done I will update the site to use SSL.

@Clidus Clidus self-assigned this Jun 28, 2014

@Clidus

This comment has been minimized.

Copy link
Owner

Clidus commented Jun 30, 2014

We have a certificate, now to update the site to use SSL.

@tsilvia

This comment has been minimized.

Copy link

tsilvia commented Jun 30, 2014

Excellent. I noticed that you can still visit the site via http instead. You might want to consider forcing connections to be only via https. I know there is only so much time in the day, I just am adding additional points as I see them.

Clidus added a commit that referenced this issue Jul 3, 2014

@Clidus

This comment has been minimized.

Copy link
Owner

Clidus commented Jul 3, 2014

Done :)

@Clidus Clidus closed this Jul 3, 2014

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment