Backpacker Posted July 21, 2018 at 09:34 PM Share Posted July 21, 2018 at 09:34 PM I should have asked this years ago. I was wondering why this entire site does not utilize https:// for secure connections. It's a standard practice nowadays and I respectfully would expect a site such as this to utilize https since its beginning. Every time a user logs in here, their login credentials are not securely transmitted and anyone (i.e. NSA, government, bad guys, etc.) who knows how can see what others are doing. Just a friendly inquiry. Link to comment Share on other sites More sharing options...
Molly B. Posted July 21, 2018 at 09:36 PM Share Posted July 21, 2018 at 09:36 PM This is planned with the upcoming upgrade. Link to comment Share on other sites More sharing options...
InterestedBystander Posted July 21, 2018 at 11:03 PM Share Posted July 21, 2018 at 11:03 PM This is planned with the upcoming upgrade.Any more info on the timing for this? HTTP is often mentioned in similar posts as well as fixing the things that no longer work or are kept going with some twine and chewing gum ;-). We've seen it mentioned but not much more. Nov to Jan probably not good for veto session and end of GA. Jan to May not good for all the legislative activity. Any plans to perhaps let some folks beta test drive it? Assuming it's a board version upgrade which may be significant changes depending on how many levels different...and just maybe I have one other little pet peeve besides HTTPS ;-) I assume the IT group has a back-up and back-out plan in place as these things can be tricky regardless of how much planning. Link to comment Share on other sites More sharing options...
Molly B. Posted July 23, 2018 at 12:34 AM Share Posted July 23, 2018 at 12:34 AM Progress continues, yes, it's very complicated. Trying to clean somethings up beforehand so that we don't carry them over with the upgrade. I would hope to see the upgrade complete sometime this summer. Link to comment Share on other sites More sharing options...
chicagoresident Posted July 23, 2018 at 03:07 AM Share Posted July 23, 2018 at 03:07 AM For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes. Link to comment Share on other sites More sharing options...
WitchDoctor Posted July 23, 2018 at 03:34 AM Share Posted July 23, 2018 at 03:34 AM For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes.Me too! Link to comment Share on other sites More sharing options...
InterestedBystander Posted July 23, 2018 at 04:54 AM Share Posted July 23, 2018 at 04:54 AM For everyone that asks would it help to do a membership drive to pay the cost of an SSL certificate? I'd be happy to chip in when the time comes. Me too!This has been offered multiple times in the prior "HTTPS" threads so it sounds like that part should be covered one way or another. Link to comment Share on other sites More sharing options...
RoadyRunner Posted July 25, 2018 at 12:03 PM Share Posted July 25, 2018 at 12:03 PM I know where to get SSL carts for less than $15/yr (depending on how long - https://www.garrisonhost.com/ssl-certificates/alphassl.html) - and with a small script you can get them for free from LetsEncrypt as well.... Adding SSL should not need an upgrade. Adding SSL should not be optional. Heck, Google has long downranked sites purely because they are not SSL. The next version of Chrome will display (âSite is not secureâ) when accessing non-SSL sites. I am happy to offer tech help for this upgrade - since security, crypto and SSL is my day job.... Link to comment Share on other sites More sharing options...
Trevis Posted October 23, 2018 at 04:17 AM Share Posted October 23, 2018 at 04:17 AM Any update on this? In the current climate of the internet, SSL is pretty much essential. Link to comment Share on other sites More sharing options...
InterestedBystander Posted October 23, 2018 at 04:57 AM Share Posted October 23, 2018 at 04:57 AM Progress continues, yes, it's very complicated. Trying to clean somethings up beforehand so that we don't carry them over with the upgrade. I would hope to see the upgrade complete sometime this summer.Any update on this? In the current climate of the internet, SSL is pretty much essential.I expect the board activity to increase quite a bit in mid-January with putting in a new governor and legislature. Also post election and during fall veto session. I would hope to see the board upgrade to new version before mid-Jan maybe even giving us a chance to beta test and provide some feedback. Maybe the admins or some of the tech guys testing could provide an update and a guess on dates? Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.