22 Feb
2013
22 Feb
'13
8:50 p.m.
For free browser-trusted SSL certs you can use http://www.startssl.com/ (only
works with firefox not chromium)
Each cert is good for one subdomain on the main domain, e.g.
www.sudoroom.org but there is no limit on number of free certs per domain.
--mark B.
On Thu, Jan 31, 2013 at 11:35 PM, mark burdett <mark(a)510pen.org> wrote:
1) All Sudoroom services should use HTTPS
2) all HTTP sites should redirect to HTTPS
3) HTTP Strict Transport Security headers should be set
see e.g. www.noisebridge.net www.eff.org etc.
--mark B.