This forum uses cookies
This forum makes use of cookies to store your login information if you are registered, and your last visit if you are not. Cookies are small text documents stored on your computer; the cookies set by this forum can only be used on this website and pose no security risk. Cookies on this forum also track the specific topics you have read and when you last read them. Please confirm whether you accept or reject these cookies being set.

A cookie will be stored in your browser regardless of choice to prevent you being asked this question again. You will be able to change your cookie settings at any time using the link in the footer.

Install guide wget over http?
#1
[Not Solved] Install guide wget over http?
Why is the sentora.org site not secured by ssl? How do I determine the download script is authentic without it?
Reply
Thanks given by:
#2
[Not Solved] RE: Install guide wget over http?
You can download from github if you are concerned
Reply
Thanks given by:
#3
[Not Solved] RE: Install guide wget over http?
Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

Code:
<a href="https://github.com/sentora/sentora-core/archive/master.tar.gz" class="hover-color">Latest development snapshot (.tar.gz format)</a>
-TGates - Head of Support

SEARCH the Forums or read the DOCUMENTATION before posting!
Modules Maintained: 13 - Module Installs: 108k+

Find my support or modules helpful? Donate HERE
Get your domains using my affiliate link:
GoDaddy - Domains
Reply
Thanks given by:
#4
[Not Solved] RE: Install guide wget over http?
(07-07-2020, 12:59 PM)TGates Wrote: Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

Code:
<a href="https://github.com/sentora/sentora-core/archive/master.tar.gz" class="hover-color">Latest development snapshot (.tar.gz format)</a>

I understand both replies, but, in 2020, having *any* unsecured/unverified content seems both unwise and dangerous. What is the reasoning behind not adding SSL protection to the site and primary install script?
Reply
Thanks given by:
#5
[Not Solved] RE: Install guide wget over http?
try github if you are concerned about the security
Reply
Thanks given by:
#6
[Not Solved] RE: Install guide wget over http?
(07-28-2020, 07:23 PM)Architects in Enfield Wrote: try github if you are concerned about the security

Thank you for the reply, but it doesn't answer my question: What is the logic behind having an insecure site, especially a site for server software which *must* be secure? With the ease and (no) cost of Let's Encrypt, it just makes no sense in 2020.
Reply
Thanks given by:


Possibly Related Threads...
Thread Author Replies Views Last Post
Having both HTTP & HTTPS (Port 443 and Port 80) sites on a server dsmarter 15 18 455 08-05-2020, 12:01 AM
Last Post: modernpackaging
SSL install breaks apache service EGOSKY123 0 103 07-22-2020, 12:34 PM
Last Post: EGOSKY123
Using Sentora to forward HTTP/S traffic to another server RobbGG 1 232 07-14-2020, 10:27 AM
Last Post: RobbGG

Forum Jump:


Users browsing this thread: 1 Guest(s)