SSL/TSL Certificate for site

[Tonatos]

Hello dear Lofter and jorb.

I see your ssl certificate for this site is not safe.
So, you can update the certificate, because there is a good free certification center as a https://letsencrypt.org/

Nic.

[Fostik]

What for?
Game server already have a correct SSL.
Dont think that forum needs it.

[shubla]

But theres account that you log on. And theres some real money purchases linked to that account. (Hats, subscriptions etc.)
It would be bad to lose that account because of poor security.
It wouldnt be unheard if somone would try steal accounts by some weird way in hnh community.

[Fostik]

But theres account that you log on. And theres some real money purchases linked to that account. (Hats, subscriptions etc.)
It would be bad to lose that account because of poor security.
It wouldnt be unheard if somone would try steal accounts by some weird way in hnh community.

There's only catalog of products. You paying in integrated swift system. Its safe.

[Tonatos]

What for?
Dont think that forum needs it.

In most cases you right - for forum it is overhead, but I send account credentials in raw form. It's not secure! In open WiFi network is very easy to intercept this data.
I understand this is my personal opinion on the safety (early paranoia?!), but still why not?

[Granger]

Given the amount of shady certification authorities included in browsers these days a self signed certificate is, after accepting it permanently (=pinning), actually safer than a bought one which can be overridden without warning.

The warning is borderlining extortion since it just states that the issuer of that certificate didn't pay up the danegelt.

[loftar]

Given the amount of shady certification authorities included in browsers these days a self signed certificate is, after accepting it permanently (=pinning), actually safer than a bought one which can be overridden without warning.

The warning is borderlining extortion since it just states that the issuer of that certificate didn't pay up the danegelt.

I came here to write pretty much this. PKI is, and always has been, retarded.

[StaggerNight]

I think its a good Idea to put some security. Thats all I got to say