Converting the site to https

By adamg on Wed, 10/04/2017 - 10:51am

I've bought an SSL certificate, so I'm starting work on converting the site to use https instead of http. If everything works, you shouldn't see anything change (except that the URLs you'll get will start with https). But, of course, that's being optimistic, so my apologies in advance if you start getting weird error messages.

Ad:

Like the job UHub is doing? Consider a contribution. Thanks!

Comments

Can I still....

By dpalomares on Wed, 10/04/2017 - 10:59am.

...wear my tin hat when I post online?

By all means ...

By adamg on Wed, 10/04/2017 - 11:04am.

Next up, monorail.

With this improve

By bulgingbuick on Wed, 10/04/2017 - 11:00am.

stenography in any way?

Certainly

By adamg on Wed, 10/04/2017 - 11:04am.

Secure stenography!

You misspelled...

By Bob Leponge on Wed, 10/04/2017 - 11:40am.

You misspelled "Steganography." Hope this helps

Just chipped in toward the cost

By Bob Leponge on Wed, 10/04/2017 - 11:07am.

That certs cost money reminded me to make another small contribution toward UHub's costs, also in a small way towards helping Adam become an idle, lazy billionaire.

Click the "Support Now" button to the right if you want to do the same

How much....

By dpalomares on Wed, 10/04/2017 - 11:19am.

so I can get the Tote Bag?

How much....

By Parkwayne on Wed, 10/04/2017 - 11:28am.

for the official U-Hub space saver?

I want the "french toast alert" space saver

By anon on Wed, 10/04/2017 - 12:09pm.

I have my own driveway, but I still want one

Are you new here?

By Parkwayne on Wed, 10/04/2017 - 4:06pm.

When has having a driving ever stopped someone from using a space saver for the entire winter?

holy cow I need this

By Tim Mc. on Wed, 10/04/2017 - 2:30pm.

holy cow I need this

Adam needs some advertising

By BostonDog on Wed, 10/04/2017 - 11:42am.

Get an old Uhaul, paint "If it's happening in Boston, it's first on UniversalHub.com", and floor it down Storrow drive.

No, no -- it should be on a

By anon on Wed, 10/04/2017 - 1:21pm.

No, no -- it should be on a helicopter!

Viral Video

By cybah on Wed, 10/04/2017 - 1:41pm.

This would be a good viral video....

Certs don't necessarily cost

By anon on Wed, 10/04/2017 - 12:33pm.

Certs don't necessarily cost money: https://letsencrypt.org/

Thank you!

By adamg on Wed, 10/04/2017 - 5:35pm.

I really appreciate it!

letsencrypt.org gives you

By whiskeylover on Wed, 10/04/2017 - 11:29am.

letsencrypt.org gives you free certs. They even have bash scripts that you can plug into your crontab to automatically renew the certs every year. That's what I use for my websites. Just a suggestion.

Ditto LetsEncrypt

By PerryD on Wed, 10/04/2017 - 12:54pm.

I also use LetsEncrypt.org certs for several of my own sites. No fuss, free, and a little script renews them automatically. They're planning on releasing wildcard certs early next year.

Yay wildcard certs!

By whiskeylover on Wed, 10/04/2017 - 1:52pm.

Yay wildcard certs!

True ...

By adamg on Wed, 10/04/2017 - 5:36pm.

My host sells certificates for something cheap, like $20 for three years, so I just went with that.

Funding goals?

By Boston_res on Wed, 10/04/2017 - 11:42am.

Is there way to know your funding goals. When I donate to the Uhub effort I usually just pick a number and hit send.

.87 cents of every dollar...

By dpalomares on Wed, 10/04/2017 - 12:01pm.

goes to fund the Universal hub helicopter.

OK, I'll byte

By Gary C on Wed, 10/04/2017 - 1:28pm.

Why go to https?

Your username and password

By whiskeylover on Wed, 10/04/2017 - 1:51pm.

Your username and password are encrypted and transmitted securely. Not that we're exchanging any sensitive info on this website, but it is still a nice feature to have.

In addition to the reasons cited above

By adamg on Wed, 10/04/2017 - 5:35pm.

Google will soon start (may already be) penalizing sites that aren't using it. Since the bulk of my ad revenue depends on how many people see pages, well, yes, it's something I'd have to worry about.

As one of the folks who requested this...

By Tim Mc. on Wed, 10/04/2017 - 2:15pm.

My usual answer is "because there's no reason for any website to be unencrypted". Times have moved on, and people are finally realizing that security is important -- it's no longer time to ask "hey, why does this need to be secured?" but instead "why does this need to be unsecured?".

On a more practical level:

I use a password to sign in here. That shouldn't be exposed to my ISP, my friend's malware-infested home router, or the people in the café where I'm using WiFi.
It's nice to not have my ISP know which pages I view on a news site. My business. It's not like viewing the posts about turkeys is my secret shame or anything, I just don't want to have to think about it. Casual privacy.
ISPs sometimes do ugly stuff like inject ads or malware into unsecured sites. Securing them prevents this.

Fair enough

By Gary C on Wed, 10/04/2017 - 3:47pm.

As you say, "Why WOULDN'T you?"

On the other hand, I'm not revealing anything "private" here, as it's a public board for all to see. People can tap my line and read my thoughts secretly or they can wait 2 seconds and read them on the site. Meh.

Agreed, it's not a high

By Tim Mc. on Wed, 10/04/2017 - 4:49pm.

Agreed, it's not a high-priority site... unlike the BBC. *glares across the Atlantic*

To help keep Russians from inserting fake news

By anon on Thu, 10/05/2017 - 1:38am.

into connection streams.

Converting the site to https

Comments

Support Universal Hub