recently i found out about a project called Lets Encrypt: https://letsencrypt.org/
Its a service that gives out free unlimited HTTPS certificates, now officially a trusted source ( you can check for yourself, my website uses it now https://pxtst.com/ )
this is really significant because HTTPS certs cost a ton, like hundreds of dollars a year for a site like vexforum.com, its basically just a monopoly since it costs relatively nothing for them to sign certs
I was wondering now that there are free certs that vexforum can finnaly use https, it makes people feel a lot safer when browsing on insecured networks
Something that might discourage them from using letsencrypt is that letsencrypt-auto doesnt support automatically configuring nginx yet, so what i did was i ran “sudo service nginx stop&&./letsencrypt-auto certonly&&sudo service nginx start” make sure you have 443 forwarded for the authentication proccess, it has a graphical that asks you what domains you want certs for and everything is automatic
and then once you have certs, just update the nginx site configuration
I’m with Cody about passwords. I use a multiword password and then leet code it with numbers and special characters
Forum sites get a simple password like R0b0ts!
Sites that I order from get minor complex R0b0t0rd3r
Email sites is the next complex: G00gl3f0$t3rm@1l! since email is the backup for lost passwords on most sites.
Banking sites are even longer phrases. My Swiss bank password is 6 words long.
You should be worried about the “security questions” that sites ask for. Mother’s maiden name, street where you grew up, year you graduated from high school, fathers middle name, pet’s name, etc. With social media and the cross references of census and genealogy references it’s easy to figure lots of this stuff out. My suggestion is to do a memorized swap. Mother’s maiden name becomes your father’s middle name. His middle name becomes her maiden name. Swap a sibling for pet info. As long as you do it all the time it becomes easy to remember. Or you can use a phrase instead of the info: “Mother’s maiden name” -> baby ducks". But be careful, I had a friend that made it “it’s a secret”, and then had an interesting discussion with a live agent before he could get them to type in “it’s a secret” to get the account unlocked.
I’m not too worried about https: here, but expect it to be on shopping sites, banks, etc. I’d rather see the VEX guys spend more time on the next generation controller.