search

BaySchoolCS2 / ProjectRepo

Whirpl - A network designed with small communities in mind
MIT License
1 stars 9 forks source link

Use https for login/signup page #68

Open michardy opened 9 years ago

fhebert-perkins commented 9 years ago

Do you understand how https is implemented?

michardy commented 9 years ago

We need to have SSL/TLS encryption before we make the site public. We would need a certificate and the whole website should probably be encrypted to protect from programs like Firesheep. The implementation would change depending on whether we are just using flask or we are hosting the static files on Nginx with a proxy to flask. The Flask static file handler is not recommended for production use.

fhebert-perkins commented 9 years ago

and how is this a software issue?

michardy commented 9 years ago

It needs to be put somewhere so that it gets fixed before we start running the website