Print at Dec 19, 2025, 6:41:05 PM
Posts: 14   Pages: 2   [ 1 2 | Next Page ]
View all posts in this thread on one page
Posted by KitchM at Aug 10, 2019, 12:48:49 AM
Secure Web Site
The web site does not have proper security. That function is pretty common place nowadays. This needs to be setup as soon as possible.

Posted by Mike53 at Aug 10, 2019, 1:20:08 AM
Re: Secure Web Site
The difference between http and https, for the site owner, is anything between £150 and £300 per annum, since we are all here having discussions about what is basically free, paid version simply contains a larger library, software prog developed and maintained almost solely by 1 individual, it hardly seems right or warranted to expect him to shell out cash as well as his time.

Posted by Puybaret at Aug 11, 2019, 4:10:52 PM
Re: Secure Web Site
No hurry for https, simply because it won't bring anything. I prefer to spend time on some more interesting features.
----------------------------------------
Emmanuel Puybaret, Sweet Home 3D creator

Posted by UbuntuBirdy at Aug 11, 2019, 6:10:41 PM
Re: Secure Web Site
No hurry for https, simply because it won't bring anything. I prefer to spend time on some more interesting features.

Absolutely correct decision! After all, it is in everyone's own responsibility to protect his files and his system enough!
----------------------------------------
Pascal

SH3D 6.6 / Ubuntu 22.04 (Mainline-Kernel) / Radeon RX580 / Ryzen 7 5800x

Posted by KitchM at Aug 12, 2019, 7:44:38 PM
Re: Secure Web Site
Well, you all have missed the point. Cost = free. Time = a couple setting in the web sites CMS. The HTTPS gets rid of the annoying popups that point out that the sight is insecure every time someone wishes to log in.

I am a little surprised this wasn't done from the outset since the webmaster would certainly wish to protect his data as well as that of his visitors.

Posted by mirakels at Aug 13, 2019, 6:21:15 PM
Re: Secure Web Site

Absolutely correct decision! After all, it is in everyone's own responsibility to protect his files and his system enough!


Well, using an http site I cannot protect my password from be snbooped from the network...


With certbot (https://certbot.eff.org/) it is free and relatively easy to setup a secure site with a valid certificate.

Posted by UbuntuBirdy at Aug 13, 2019, 6:31:11 PM
Re: Secure Web Site

Absolutely correct decision! After all, it is in everyone's own responsibility to protect his files and his system enough!


Well, using an http site I cannot protect my password from be snbooped from the network...


With certbot (https://certbot.eff.org/) it is free and relatively easy to setup a secure site with a valid certificate.


Right, but you have the choice to not login to this site. It is ALWAYS your decision what you present to the internet, not the one of a webmaster...
----------------------------------------
Pascal

SH3D 6.6 / Ubuntu 22.04 (Mainline-Kernel) / Radeon RX580 / Ryzen 7 5800x

Posted by mirakels at Aug 13, 2019, 8:04:18 PM
Re: Secure Web Site

Absolutely correct decision! After all, it is in everyone's own responsibility to protect his files and his system enough!


Well, using an http site I cannot protect my password from be snbooped from the network...


With certbot (https://certbot.eff.org/) it is free and relatively easy to setup a secure site with a valid certificate.


Right, but you have the choice to not login to this site. It is ALWAYS your decision what you present to the internet, not the one of a webmaster...

That is very philosophical Pascal ;) I guess this site is made available for users and the 'webmaster' likes to have visitors. If I do not login I cannot post. And users might stay away from Sweethome3D for this reason. Is that the objective of the site?

But I don't want to argue, I just wanted to point out that creating a secure site may not be as hard and expensive as you may think. Certbot certificates last only for a couple of months but there is an automatic procedure to regularly update the certificate so in principle it is setup once and never look back at it again...

Posted by UbuntuBirdy at Aug 13, 2019, 8:38:40 PM
Re: Secure Web Site
@mirakels - you're right again, it is very philosophical. But it's also a very realistic point of view: it is the webmasters choice if he wants the visitors and how secure his site is. And it's the visitors choice if hor she wants to risk to visit a not https secured website or even login to such a site.
This is how life is: everyone has to decide for himselfe. If I take a decison and something went wrong, it's my problem and I will not postpone this problem to others.
This, in my eyes cowardly, behavior is already epidemic meanwhile and therefore I will fight it whenever I can.

No one should feel attacked, please, I just describe one of my principles.
----------------------------------------
Pascal

SH3D 6.6 / Ubuntu 22.04 (Mainline-Kernel) / Radeon RX580 / Ryzen 7 5800x

Posted by dorin at Aug 13, 2019, 9:49:28 PM
Re: Secure Web Site
the 'webmaster' likes to have visitors

NO. We like to have visitors and we like to learn or to help.
If I do not login I cannot post.

I'ts perfect!
If You have to say something assume the responsibility NOT by hiding on anonymity.
And users might stay away from Sweethome3D for this reason.

Relay? There are few thousands there and they appear to don't have something to hide.
----------------------------------------
A computer program does what you tell it to do, not what you want it to do. Murphy's Law
When all else fails, read the instructions. Murphy's Law
If you don't like "AS IS", DIY. Dorin's law

Posts: 14   Pages: 2   [ 1 2 | Next Page ]