I am very surprised up till now Nairaland doesn't have SSL enabled by default. The reason for having SSL/TLS enabled can't be over emphasized. However I won't argue with the decisions seun as made thus far for the platform just my suggestion

However for those interested in enabling SSL/TLS on their website, there is good news. It's possible to have it for free. There has been an initiative by the Internet Security Research Group to provide SSL for all web application

Find it here : https://letsencrypt.org/

If you find the documentation a bit too technical just follow the instruction here https://certbot.eff.org/ it automatically enables HTTPS on your website for free and even does the auto renewal.

It will be nice if Nairaland have this basic layer of security. Just imagine someone doing an MITM attack on one us ones password and other details will be in clear

Please Nairaland web admin enable HTTPS abeg. even https://www.bellanaija.com/ has it already. And please don't tell me that it will reduce speed it absolutely not the right justification

Let me know what you think.

KR.
@redrumz

redrumz:
I am very surprised up till now Nairaland doesn't have SSL enabled by default. The reason for having SSL/TLS enabled can't be over emphasized. However I won't argue with the decisions seun as made thus far for the platform just my suggestion

However for those interested in enabling SSL/TLS on their website, there is good news. It's possible to have it for free. There has been an initiative by the Internet Security Research Group to provide SSL for all web application

Find it here : https://letsencrypt.org/

If you find the documentation a bit too technical just follow the instruction here https://certbot.eff.org/ it automatically enables HTTPS on your website for free and even does the auto renewal.

It will be nice if Nairaland have this basic layer of security. Just imagine someone doing an MITM attack on one us ones password and other details will be in clear

Please Nairaland web admin enable HTTPS abeg. even https://www.bellanaija.com/ has it already. And please don't tell me that it will reduce speed it absolutely not the right justification

Let me know what you think.

KR.
@redrumz

Thanks for sharing.

Please share more value and less linking.

redrumz:
I am very surprised up till now Nairaland doesn't have SSL enabled by default. The reason for having SSL/TLS enabled can't be over emphasized. However I won't argue with the decisions seun as made thus far for the platform just my suggestion

However for those interested in enabling SSL/TLS on their website, there is good news. It's possible to have it for free. There has been an initiative by the Internet Security Research Group to provide SSL for all web application

Find it here : https://letsencrypt.org/

If you find the documentation a bit too technical just follow the instruction here https://certbot.eff.org/ it automatically enables HTTPS on your website for free and even does the auto renewal.

It will be nice if Nairaland have this basic layer of security. Just imagine someone doing an MITM attack on one us ones password and other details will be in clear

Please Nairaland web admin enable HTTPS abeg. even https://www.bellanaija.com/ has it already. And please don't tell me that it will reduce speed it absolutely not the right justification

Let me know what you think.

KR.
@redrumz

Although Seun might have other reasons, but to me, SSL is not necessary for a website like this... It's just a forum and not a website for NSA.

WhatsApp and Facebook are examples of what happens when you take "security" too personal

The obvious reason why you would enable SSL on Nairaland or any website like this is because sensitive data ( username and password) are transmitted through the internet to Nairaland servers.

Without SSL your login information ( username and password) will be to decode in clear text. Enabling SSL allows for a secure encrypted connection from your web browser to nairaland's servers( smart that they have cloudfare as proxy though ) via the internet.

At least for the login part should have SSL (Https) enabled during login and you can redirect to http. Not like this suggestion is an industry standard.

FincoApps:


Although Seun might have other reasons, but to me, SSL is not necessary for a website like this... It's just a forum and not a website for NSA.

WhatsApp and Facebook are examples of what happens when you take "security" too personal

By 2018 90% of websites will be https. That's the plan, it's not optional

the *https* ensures users that the site is safe




check here https://9japikinblog..com

ITbomb:

By 2018 90% of websites will be https. That's the plan, it's not optional

That would be great

op leave Nairaland alone. no be by force to get. HTTP's.

emillionaire:
op leave Nairaland alone. no be by force to get. HTTP's.

Exactly!!! Especially when it doesn't have to do with money or other more important stuff

This is informative. Op cheers