only serve over HTTPS

[chadwhitacre]

Reticketing from gratipay/inside.gratipay.com#554 (video link):

Right now the Cobudget beta is only served on HTTP. I propose that it only be available on HTTPS! :-)

I haven't used it, but Let's Encrypt seems like it could be a good option?

Let’s Encrypt is a new Certificate Authority: It’s free, automated, and open.

[gardner]

It looks like there's a rails plugin that works on heroku: https://github.com/lgromanowski/letsencrypt-plugin

[data-doge]

thx for flagging @whit537 !

will address as soon as possible :) 🌴 🌴 🌴

[chadwhitacre]

+1 from @jessykate at https://cobudget.slack.com/archives/feature-requests/p1459915273000012.

[gardner]

on it

[data-doge]

@gardner

hey gardner :) -- hows this goin?

derek and i need to have this done and deployed in 2 days. if you don't have enough capacity to get this done before then, i'm fine with taking it over.

just lmk -- thx!!

[gardner]

We just need to move beta.cobudget.co to a hosting provider that supports https on a custom domain. Right now it’s on github pages which does not do this.

On Apr 18, 2016, at 12:03 PM, Eugene Lynch notifications@github.com wrote:

@gardner https://github.com/gardner
hey gardner :) -- hows this goin?

derek and i need to have this done and deployed in 2 days. if you don't have enough capacity to get this done before then, i'm fine with taking it over.

just lmk -- thx!!

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub https://github.com/cobudget/beta.cobudget.co/issues/2#issuecomment-211133896

[chadwhitacre]

You could also consider putting CloudFlare in front of it. They've got a free plan.

https://www.cloudflare.com/ssl/

[data-doge]

@gardner

can you get this done within the next 36 hours?

[data-doge]

@gardner nvm, just saw your slack msg :)

[gardner]

To mitigate the attacts that folks are worried about we would need CloudFlare full encryption which is not free. I feel their half encryption is disingenuous.