search

hidviz / hidviz

A tool for in-depth analysis of USB HID devices communication
GNU General Public License v3.0
555 stars 59 forks source link

Support proper TLS cert/verification on hidviz.org #12

Closed craftyguy closed 7 years ago

craftyguy commented 7 years ago

I'm maintaining the Arch Linux package (just in case you don't remember me) and currently hidviz.org's HTTPS TLS cert fails server verification (the cert's domain doesn't match the url). This is very important for insuring some amount of integrity for the source code.

ondrejbudai commented 7 years ago

Sorry for the delay. I will be looking into this today, please expect possible outage on hidviz.org.

ondrejbudai commented 7 years ago

Aaaaand done. Currently using Cloudflare as proxy. It isn't perfect, but it works.

craftyguy commented 7 years ago

Just curious, why not use Let's Encrypt for a free TLS cert instead? It's certainly more trustworthy than proxying through cloudflare.. where the traffic could easily be MITMed by them.

ondrejbudai commented 7 years ago

It's currently the easiest way. The webpage is hosted on github pages which doesn't support custom SSL certificates. Therefore using proxy is the only option. I'm currently looking into migrating the project somewhere else. My requirements are low price or better free and SSL support. If you have any ideas I will be glad. :)

ondrejbudai commented 6 years ago

FYI hidviz.org now works with our own Let's encrypt certificate on GH pages.