Re: [sudo-sys] HTTPS please - sudo-sys

22 Feb 2013

For free browser-trusted SSL certs you can use http://www.startssl.com/ (only
works with firefox not chromium)

Each cert is good for one subdomain on the main domain, e.g.
www.sudoroom.org but there is no limit on number of free certs per domain.

--mark B.

On Thu, Jan 31, 2013 at 11:35 PM, mark burdett &lt;mark(a)510pen.org&gt; wrote:

...
  1) All Sudoroom services should use HTTPS
 2) all HTTP sites should redirect to HTTPS
 3) HTTP Strict Transport Security headers should be set

 see e.g. www.noisebridge.net www.eff.org etc.

 --mark B.