Would it be possible to set up HTTPS for these forum/discussion board? I don’t like using JavaScript heavy sites over plain HTTP, esp. not when it carries authentication information too. 
1 Like
Hmm, yes, it is weird that this is running unencrypted. I can’t find an obvious way to turn on TLS in the setting here… the site is hosted thanks to a generous donation from the Discourse people, so I don’t have direct control over the server.
Would anyone be willing to volunteer to email the Discourse people and ask whether it’s possible to turn on security for hosted sites?
Has there been any previous communication with the “discourse people” that I could refer to when contacting them?
Nothing too personal, but we did get a form letter when our request for an OSS hosted forum was approved. I’ll send you a private message with that email address!
Me too — I would rather use this site over https rather than http. My browser pointed out that when I created this account just now, my password was being sent in the clear to the server.
How did it go, contacting the Discourse people and asking them to turn on https?
I just emailed them, and they immediately turned on SSL! We should be good to go.
2 Likes
It works for me now! I can log in from an https: URL. When I connect via an insecure, http: URL, the site transfers me to the corresponding secure, https: URL.
Thank you, @adrian.