HTTPS issues on your site

elrido / ZeroBin

This Project has been renamed and moved to

https://github.com/PrivateBin/PrivateBin

Other

85 stars 8 forks source link

HTTPS issues on your site #60

Closed rugk closed 8 years ago

rugk commented 8 years ago

If you already talk about HSTS and HPKP in the Readme you should at least have your own websites configured properly...

https://www.ssllabs.com/ssltest/analyze.html?d=snip.dssr.ch

You use a SHA-1 cert
You do not support TLS 1.1. or 1.2.

:disappointed:

elrido commented 8 years ago

I know this, but have not yet had time to set up the new servers I bought. One of my many projects... ;-)

angristan commented 8 years ago

I was going to open a new issue but as I can see, someone already noticed this. :)

You can use this website too : https://tls.imirhil.fr/https/zerobin.dssr.ch

alexandreteles commented 8 years ago

If you don't have time, please, consider using Caddy Server

bpvarsity commented 8 years ago

What is the best way to setup SSL for zerobin?

rugk commented 8 years ago

What is the best way to setup SSL for zerobin?

The same way you would setup SSL/TLS for any site. Use a strong configuration and if you want to have further protection use HPKP.

elrido commented 8 years ago

After over a year of back and forth and preparations, last weekend I could finally conclude my server move and have just installed a fresh certificate, too. Huzzah! :rocket: