New Nauvoo Forum

General Category => Technical Talk => Topic started by: dyany on July 18, 2021, 01:39:56 am

Title: SSL/HTTPS and Nauvoo
Post by: dyany on July 18, 2021, 01:39:56 am
Saw an article this week that Google and Mozilla will soon be implementing changes in their web browsers (Chrome and Firefox, respectively) to soft-block sites without HTTPS/SSL encryption--that is, when you try to go to a site without that safety protocol in place, you will instead get a big warning message telling you the site is unsafe, which you will have to force your way past to get to the site. At first it will be an opt-in setting, but after a bit it will default on. The reason they are doing this is because HTTPS/SSL is a vastly safer standard that takes 5 minutes to implement and can be easily done for free.

Right now, New Nauvoo does NOT have HTTPS/SSL encryption implemented on the site, despite a few requests that this safety feature be added.

So I'm posting this as a heads-up and a warning. A warning because this site is not (and never has been) encrypted, which means that any information sent to and from this site (including not just posts, but usernames and passwords) are wide open for packet sniffers and any other bot or hacker to pick up. So if you don't like that happening, you either have to stop coming here or find another solution. And don't assume that the site is too small to be a target. Hackers rarely do such things manually anymore, and with over 90% of sites being properly encrypted, the less than 10% of sites without SSL/HTTPS are a magnet for evil people who know that most users, despite many warnings, use the same passwords and usernames in many places.
A heads-up because in a few months, when you try to come here, your browser will automatically start blocking this page from coming up. If you want to ignore and push through that safeguard you will be free to do so, but you will have to pay attention and know how to get past it to come here. And unless you turn that setting off in your browser, you will be blocked every time you try to come to New Nauvoo.
Title: Re: SSL/HTTPS and Nauvoo
Post by: Sparky on July 18, 2021, 06:32:39 pm
Thanks for the heads-up! I have a little site with links for school.  No passwords are needed. So, every time kids want to use my site, I understand that they will have to "push through" to get to my site once this goes into place? Urrgghh! Is it difficult, more expensive, etc? to get the s added to the http?
Title: Re: SSL/HTTPS and Nauvoo
Post by: dyany on July 18, 2021, 09:33:35 pm
It used to be fairly expensive, but these days it is fairly easy to find free services and it can be very easy to set up depending on your site host. Personally, we use Siteground to host all my sites, and I LOVE them, partially because they are very easy and intuitive to use all around, including the HTTPS/SSL setup taking less than 5 minutes and being completely free.

Basically, sadly, lots of people go with hosts that they have heard of because they don't realize that they differ wildly. Bluehost, for instance, is extremely popular for hosting things like WordPress, but I found them less user friendly. GoDaddy is popular simply because they actually advertise to "non-nerd" markets, and most people there not only don't know what is good and what isn't, but they don't know that hosting and domain registration are 2 completely separate services (which happen to often be offered together as a bundle). Those are just some of the bigger hosts, but there are literally thousands of web hosts out there with a huge variety of reliability, integrity, authenticity, and service packages. I have only tried a total of 3 (Bluehost, 1and1, and Siteground), and of those, Siteground is by FAR the best, and has made SSL so ridiculously easy that I feel spoiled.

The package we have through Siteground we got to allow us to host sites for others. So if you figure out that your current host isn't as good as you'd like, I can probably offer you a pretty cheap deal (like $20/year or something) for basic hosting.
Title: Re: SSL/HTTPS and Nauvoo
Post by: pnr on July 19, 2021, 06:30:32 pm
If it's $20 and Nauvoo wants to do it (and with you), I'll donate the money.
Title: Re: SSL/HTTPS and Nauvoo
Post by: dyany on July 19, 2021, 06:37:57 pm
pnr, again, it's FREE. No need to donate money. EDIT: I see the confusion. You were referring to hosting, but the hosting offer I made was in response to Sparky's comment regarding her site for her students. 

And it looks like this thread did what directly asking did not, and Nauvoo now has SSL implemented. Huzzah!

Title: Re: SSL/HTTPS and Nauvoo
Post by: LMAshton on July 19, 2021, 07:24:37 pm
And it looks like this thread did what directly asking did not, and Nauvoo now has SSL implemented. Huzzah!
No. Kidding.
Title: Re: SSL/HTTPS and Nauvoo
Post by: AndrewR on July 20, 2021, 05:32:02 am
There was a certain amount of disruption that was going to happen with changing the existing site to SSL.

First it requires the hosts to move the entire website. It also changes the direct pathing, which had to be changed in the database manually. Hence the time it took to do the change.

Sorry it took so long to do.
Title: Re: SSL/HTTPS and Nauvoo
Post by: Roper on July 21, 2021, 12:23:35 pm
Everything looked seamless from my end, Just the down time, which was absolutely no a big deal. Thank you for all the work you've done, Andrew.
SimplePortal 2.3.7 © 2008-2021, SimplePortal