Forum Staff: Switch to Let's Encrypt?

[jcbbjjttt]

Hey Forum Staff,

Looks like your SSL certificate expired this morning! Before you go and buy a new one, you may want to see if you can use a free alternative: Let's Encrypt.

https://letsencrypt.org/getting-started/

Depending on how you're hosting the site / forum, it maybe be incredibly easy to get going.

Best of luck!

[DinoTriz2]

Some hosting providers setup automatic SSL renewals in cPanel as well

[loramin]

I just think it's funny that most websites would be bleeding away the vast majority of users from a cert issue like this ... but everyone on P99 just blindly trusts that the site didn't get hacked and cheerfully clicks through all their browser warnings to continue their daily posting (including posts about how to fix things).

Gotta <3 this community.

[loramin]

it does not matter if this forum got hacked theres nothing here of value?

Unless your session happens to expire during this and you happen to use the same username/password to log back in here as you use for your email/bank/whatever.

But no Internet user would ever use the same password on this site and a significant site ... right ...? Especially not the kind that might ignore a cert warning without fully understanding it ... ;)

[Cen]

Can the russians steal my web now?

[jcbbjjttt]

Unless your session happens to expire during this and you happen to use the same username/password to log back in here as you use for your email/bank/whatever.

But no Internet user would ever use the same password on this site and a significant site ... right ...? Especially not the kind that might ignore a cert warning without fully understanding it ... ;)

Unless someone received the private key yesterday, you're about as secure as you were yesterday. This site is encrypting the same way it was 24 hours ago before the certificate expired. The only real difference is that your browser will warn you about it.

[DinoTriz2]

I just think it's funny that most websites would be bleeding away the vast majority of users from a cert issue like this ... but everyone on P99 just blindly trusts that the site didn't get hacked and cheerfully clicks through all their browser warnings to continue their daily posting (including posts about how to fix things).

Gotta <3 this community.

Some of us are smart enough to look up if their cert expired ;)

[DinoTriz2]

Installing a new cert on an Exchange server right now for a client

...I could do the same for P99...just sayin...

[Irulan]

N1g3r1@nZ can't even keep the lights on.

Time to cash out and take the forums / game offline, buy a new car and visit Costa Rica.

[DinoTriz2]

https://playphoenix.online/ has their certificate up to date...

Jus saying...

Try RED, BLUE, and GREEN

[DinoTriz2]

Mid favors melee players though.

Plus...Vikings...

[loramin]

Unless someone received the private key yesterday, you're about as secure as you were yesterday. This site is encrypting the same way it was 24 hours ago before the certificate expired. The only real difference is that your browser will warn you about it.

Some of us are smart enough to look up if their cert expired ;)

Yes I understand how security certifications work: I literally teach a class for the University of California where the first lesson is on how the Internet works, and in that lesson I break down how the whole private/public key exchange goes down behind the scenes and everything (I also tie it back to the Choctaw code talkers in WWII; helps keep it more interesting).

My point was more that I don't think everyone ignoring the security warnings has that level of understanding: all they see is "Chrome is freaking out", they don't see "the security cert expired a day ago and this probably isn't a hack". But even though they don't have the understanding we do, they continue to use the site.

[DinoTriz2]

Yes I understand how security certifications work: I literally teach a class for the University of California where the first lesson is on how the Internet works, and in that lesson I break down how the whole private/public key exchange goes down behind the scenes and everything (I also tie it back to the Choctaw code talkers in WWII; helps keep it more interesting).

My point was more that I don't think everyone ignoring the security warnings has that level of understanding: all they see is "Chrome is freaking out", they don't see "the security cert expired a day ago and this probably isn't a hack". But even though they don't have the understanding we do, they continue to use the site.

Do you tell them that the Internet is for porn?

[loramin]

Do you tell them that the Internet is for porn?

Why would I do that when Trekkie Monster can do it for me (https://www.youtube.com/watch?v=LTJvdGcb7Fs)?

https://i.imgur.com/2TuIhE2.gif (https://www.youtube.com/watch?v=LTJvdGcb7Fs)

[Irulan]

I used the internet to learn how to sashay my hips this morning.

[America]

I have unusually resilient throat mucosa.