Add HTTPS support - Githubissues

koodiklinikka / koodiklinikka.fi

Koodiklinikka on kaikille avoin softakehitykseen keskittynyt yhteisö.

https://koodiklinikka.fi

MIT License

5 stars 22 forks source link

Add HTTPS support #5

Closed n1koo closed 9 years ago

n1koo commented 9 years ago

In the spirit of HTTP/2 and HTTPS everywhere lets get SSL going.

Options on implementing this:

Buy a cert ( ~20/year )
Get free one from https://www.startssl.com/
- Have to manually renewed every year
Put koodiklinikka.fi behind a service that offers SAN's. Like cloudflare

japsu commented 9 years ago

Let's do this right the first time and make the site an example of good SSL practices for the members:

SHA-256 hash in the certificate
Strong SSL settings in nginx (PFS, secured against downgrade attacks, AES-GCM, ECDHE)
HTTP Strict Transport Security headers
screw the old browsers ;) ;)
etc.

Mozilla recommended TLS settings are a good place to start. Should get A+ from SSL Labs' test.

n1koo commented 9 years ago

:+1: @japsu

I can handle that on the weekend probably. I can also grab a free cert from Startssl since if we want to it really secure we can't really rely on service like cloudflare which also have think about compatiblity.

japsu commented 9 years ago

:+1:

n1koo commented 9 years ago

A+ from SSL Labs' test

Free cert (1year) from startssl installed.

For config: https://github.com/koodiklinikka/playbooks/blob/master/files/nginx/ssl_profile.conf

japsu commented 9 years ago

:+1: