OpenZWave / open-zwave-web

This repository stores the files for the main OpenZwave Website
http://www.openzwave.net/
10 stars 7 forks source link

Enable HTTPS on Website #4

Open jeffsanicola opened 4 years ago

jeffsanicola commented 4 years ago

Since the website requires registering credentials in order to contribute to the database, I think it would be beneficial to implement HTTPS to help secure the credentials in transit (among other benefits from HTTPS).

Currently Chrome and Firefox pop up warnings that credentials may be exposed when registering and logging in.

Web server certs can be acquired at no cost from Let's Encrypt and a free utility (Certbot) to acquire and apply/rotate certificates is available here: https://certbot.eff.org/ (for compatible web servers).