Website Security

Name
Email
Subject
Comment *
File	Select/drop/paste files here
* = required field	[▶ Show post options & limits] Confused? See the FAQ.

Options	Do not bump (you can also write sage in the email field) Spoiler images (this replaces the thumbnails of your images with question marks)
Password	(For file and post deletion.)
Allowed file types:jpg, jpeg, gif, png, webm, mp4, swf, pdf Max filesize is 8 MB. Max image dimensions are 10000 x 10000. You may upload 5 per post.

File: 1431464951921-0.png (165.58 KB, 610x448, 305:224, https.png)

File: 1431464951922-1.png (85.69 KB, 711x451, 711:451, tor_project_logo_hq.png)

Website Security Anonymous 05/12/15 (Tue) 21:09:11 7944f5 No.215

/tech/ here.

I want to help with your infrastructure. deepfreeze.it is politically sensitive and the security of the users should be taken seriously. Currently, you don't have a certificate for the website (nice job btw) for https. Is there an IRC I can join to help fix this? A .onion address would be nice too, but that might open you up to spam a bit more.

Anonymous 05/13/15 (Wed) 22:42:35 34fce8 No.220

>>215

I don't think DeepFreeze has user-submitted content so the only problem with a .onion solution is that it typically requires some kind of dedicated or virtualized hosting.

Anonymous 05/13/15 (Wed) 23:16:07 000000 No.221

>>220

as in, no CLI access for the server running? Weird, but alright. You still need an SSL cert, and should enable SSL by default. If funds are an issue, just use https://www.startssl.com/ for a free certificate (they cost money to revoke though).