Yii Framework Forum: HTTPS - Yii Framework Forum

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

HTTPS Rate Topic: -----

#1 User is offline   oligalma 

  • Advanced Member
  • PipPipPip
  • Yii
  • Group: Members
  • Posts: 419
  • Joined: 07-April 12
  • Location:Spain

Posted 03 April 2015 - 06:24 PM

I noticed that the yiiframework website isn't HTTPS. Does it mean that our login credentials could be hacked by someone?
1

#2 User is offline   samdark 

  • Having fun
  • Yii
  • Group: Yii Dev Team
  • Posts: 5,184
  • Joined: 17-January 09
  • Location:Russia

Posted 04 April 2015 - 03:28 PM

There's such possibility if you're in a cafe using public wifi w/o VPN.
Yii 2.0 Development Cookbook

Enjoying Yii? Star us at github

Support me so I can work more on Yii: https://www.patreon.com/samdark
0

#3 User is offline   oligalma 

  • Advanced Member
  • PipPipPip
  • Yii
  • Group: Members
  • Posts: 419
  • Joined: 07-April 12
  • Location:Spain

Posted 04 April 2015 - 07:45 PM

View Postsamdark, on 04 April 2015 - 03:28 PM, said:

There's such possibility if you're in a cafe using public wifi w/o VPN.


really? I think that the owners of this site should buy a SSL certificate. It's only 50 euros per year.
0

#4 User is offline   Da:Sourcerer 

  • Elite Member
  • PipPipPipPipPip
  • Yii
  • Group: Members
  • Posts: 1,269
  • Joined: 30-March 11
  • Location:Berlin, Germany

Posted 06 April 2015 - 04:31 AM

It's even free with StartSSL. I however suspect there'll be problems with assets serverd by CDNs among other issues. Would still be cool if this could happen one day B)
programmer /ˈprəʊgramə/, noun: a device that converts ►coffee into ►code
1

#5 User is offline   samdark 

  • Having fun
  • Yii
  • Group: Yii Dev Team
  • Posts: 5,184
  • Joined: 17-January 09
  • Location:Russia

Posted 06 April 2015 - 04:36 AM

Noted.
Yii 2.0 Development Cookbook

Enjoying Yii? Star us at github

Support me so I can work more on Yii: https://www.patreon.com/samdark
0

#6 User is offline   Da:Sourcerer 

  • Elite Member
  • PipPipPipPipPip
  • Yii
  • Group: Members
  • Posts: 1,269
  • Joined: 30-March 11
  • Location:Berlin, Germany

Posted 06 April 2015 - 04:40 AM

Ah, while we're at it: There's also the Let's Encrypt initiative backed by Mozilla et al.
programmer /ˈprəʊgramə/, noun: a device that converts ►coffee into ►code
1

#7 User is offline   Keith 

  • Elite Member
  • Yii
  • Group: Moderators
  • Posts: 1,707
  • Joined: 04-March 10
  • Location:UK

Posted 06 April 2015 - 05:50 AM

I agree, it would be good to have SSL for authentication pages.
0

#8 User is offline   Da:Sourcerer 

  • Elite Member
  • PipPipPipPipPip
  • Yii
  • Group: Members
  • Posts: 1,269
  • Joined: 30-March 11
  • Location:Berlin, Germany

Posted 27 April 2015 - 01:57 PM

As this may be interesting to others as well: There is a SSL Config Generator serving as some sort of counter-piece to SSL-Labs' Online Test.

Edit: And there's cipherli.st
programmer /ˈprəʊgramə/, noun: a device that converts ►coffee into ►code
0

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • This topic is locked

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users