Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > Suggestions > Topic : Integrate Let's Encrypt (Free SSL - TLS)



Threaded Mode | Print  

 Integrate Let's Encrypt (Free SSL - TLS) (11 Replies, Read 16084 times)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Will be a good things integrate Let's Encrypt for have free SSL / TLS certificate. Will be good can manage domain certificate and maybe also use the certificate for email.

https://letsencrypt.org/

Yes you can use via SSH but you have not visual area where manage this so for not expert user will be good have something integrated in the panel, if possible.

Is a suggestion so all can have SSL certificate.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
husain_bhala
Group: Member
Post Group: Working Newbie
Posts: 62
Status:
Hi Marco,

We are aware of Let's Encrypt and are already considering its integration with Webuzo.

But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel.

They can be used by attackers as well like the one mentioned in this article:
http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Quote From : husain_bhala February 27, 2016, 8:30 am
Hi Marco,

We are aware of Let's Encrypt and are already considering its integration with Webuzo.

But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel.

They can be used by attackers as well like the one mentioned in this article:
http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/


Thank you for have replied to me!
I was not aware of this security issue, thank you for let me know.

For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
Termon
Group: Member
Post Group: Newbie
Posts: 2
Status:
Quote From : peopleinside February 27, 2016, 9:53 am
Quote From : husain_bhala February 27, 2016, 8:30 am
Hi Marco,

We are aware of Let's Encrypt and are already considering its integration with Webuzo.

But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel.

They can be used by attackers as well like the one mentioned in this article:
http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/



Thank you for have replied to me!
I was not aware of this security issue, thank you for let me know.

For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt.


There's no reason not to use LetsEncrypt. There are no security issues with letsencrypt. The posted link mentions that LetsEncrypt gives free SSL certificate to every website owner in the world as long as you can prove you own the domainname, which is exactly what they advertised.
Comodo domain validated SSL certificates are not free and it is better than LetsEncrypts domain validated SSL certificates for website owners in any way.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
Termon
Group: Member
Post Group: Newbie
Posts: 2
Status:
Quote From : peopleinside February 27, 2016, 9:53 am
Quote From : husain_bhala February 27, 2016, 8:30 am
Hi Marco,

We are aware of Let's Encrypt and are already considering its integration with Webuzo.

But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel.

They can be used by attackers as well like the one mentioned in this article:
http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/



Thank you for have replied to me!
I was not aware of this security issue, thank you for let me know.

For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt.


There's no reason not to use LetsEncrypt. There are no security issues with letsencrypt. The posted link mentions that LetsEncrypt gives free SSL certificate to every website owner in the world as long as you can prove you own the domainname, which is exactly what they advertised.
Comodo domain validated SSL certificates are not free and it is not better than LetsEncrypts domain validated SSL certificates for website owners in any way.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
husain_bhala
Group: Member
Post Group: Working Newbie
Posts: 62
Status:
We are considering adding bundled utility inside Webuzo itself to manage SSLs from Let's Encrypt.

We will try to include this feature as soon as possible. An exact ETA may not be possible right now but I assure you we will start working on it soon.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
who8mypnuts
Group: Member
Post Group: Newbie
Posts: 7
Status:
Quote From : husain_bhala July 12, 2016, 7:44 am
We are considering adding bundled utility inside Webuzo itself to manage SSLs from Let's Encrypt.

We will try to include this feature as soon as possible. An exact ETA may not be possible right now but I assure you we will start working on it soon.


I'm very pleased to hear this. It's so difficult to keep up with the renewals (I have cron job setup) and having to paste in as soon as a certificate is renewed. It would be so much easier to have it fetch (or even do so automatically!) the renewed certificates rather than having to copy and paste each one. I only have three domains and it's a hassle every few months and time that I could be using to do something else.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
OkijaAmaka
Group: Member
Post Group: Newbie
Posts: 16
Status:
it means there is no plan for SSL for Webuzo?
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Quote From : OkijaAmaka October 7, 2016, 7:45 pm
it means there is no plan for SSL for Webuzo?


Webuzo support SSL. It means Webuzo team will work for try to integrate Let's Encrypt but this required time and work.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
OkijaAmaka
Group: Member
Post Group: Newbie
Posts: 16
Status:
Quote From : peopleinside October 7, 2016, 7:52 pm
Quote From : OkijaAmaka October 7, 2016, 7:45 pm
it means there is no plan for SSL for Webuzo?


Webuzo support SSL. It means Webuzo team will work for try to integrate Let's Encrypt but this required time and work.


i am new on this "Let's Encrypt". can i purchase ssl from third party certificate or is it free?
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
peopleinside
Group: Member
Post Group: Super Member
Posts: 1394
Status:

Open source, web and security passionate
Hi,
for now if you have no experience on SSH and Webuzo and Let's Encrypt I suggest to buy a certificate from an external website.

You can look at https://www.startssl.com/
or low price ssl certificate and great support in live chat https://www.ssls.com/

Hope it helps.


-----------------------
PeopleInside  :angel:

Web, security, open source passionate.
IP: --   

Integrate Let's Encrypt (Free SSL - TLS)
OkijaAmaka
Group: Member
Post Group: Newbie
Posts: 16
Status:
Quote From : peopleinside October 8, 2016, 8:06 am
Hi,
for now if you have no experience on SSH and Webuzo and Let's Encrypt I suggest to buy a certificate from an external website.

You can look at https://www.startssl.com/
or low price ssl certificate and great support in live chat https://www.ssls.com/

Hope it helps.


will love to learn if you teach you
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is March 19, 2024, 4:09 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.028