[SSL added Sep 29 2014] Spongepowered.org; why no SSL? (now discussing its implementation and other security related things)

Meta
22

You can get Class 1 certs for free here: https://www.startssl.com/

You may as why? Answered in their F.A.Q.:

90.) Why are Class 1 certificates free?

The philosophy of StartCom is guided by the principle that our services are charged according to the effort we have to invest. Since Class 1 certificates are domain and/or email validated only and the process is performed mostly by electronic and automatic means, StartCom doesn’t apply any fees for this type of certification. StartCom started the certification authority a few years ago with the goal to provide free digital certification and adopted a unique business model previously unknown in this industry.

Edit: looks like @ShaRose was faster :slight_smile:

1 Like
23

Yeah, but class 1 certs are only legal for individuals. That’s why I said to ask StartCom about it.

24

They have an SSL cert already. They’re not using it because I’m assuming they have a free cloudflare account. So… we need a premium cloudflare account.

I forget who told me that. @lukegb, I think.

1 Like
25

as long as there is ssl on this website as long as it’s not self signed.

26

Yup, found it here: About us

27

I have a wildcard cert ready, waiting on us to get a proper CloudFlare account.

Of course, CloudFlare might introduce SSL for free accounts (which will happen in about a month - mid-October) before we get there, but we’ll see.

8 Likes
28

knew that they would get a wildcard cert knew it

29

You can get a free SSL/TLS cert from http://www.startssl.com/
I used it before, but I just used a self signed one now for my email.

30

It has been determined that they have one, a wildcard one at that, but they are using cloud flair, which requires a paid account to support SSL.

31

We could use some ssl, would make me feel more secure on my campus’ open wifi network.

32

I Agree with you.

33

Everyone seams to agree, it’s just a matter of an extra $20 per month for cloud flair.

And I don’t know who pays the bills around here, but I don’t, and as such can’t say where the money would come from.

34

Cloudflare will offer free SSL on all their free accounts by the end of this year.
Just wait.

35

Well we’re all waiting. good luck to that.

36

It has been confirmed for the end of October.

37

There’s no need. SSL protects data sent between a server-client. No personal data, or entered data is being sent via the Spongepowered.org website.

For the forums, however, that could be something to look into (SSL is different for sub-domains i.e forums.spongepowered.org).

1 Like
38

Not entirely free.

After one year it costs more than $100.

39

This is what we want protected. the persnoal data is another matter altogether, one being discused elsewhere.

1 Like
40

Please read my full reply.

I don’t see any place on the main website where data is being sent.

41

SSL also encrypts the downloading website, this allows people to access sites from behind a censor wall, like at school, some of us here are using a crappy free internet http proxy during the weak days.

1 Like