| Posted By: peopleinside on February 26, 2016, 9:20 am |
|
Will be a good things integrate Let's Encrypt for have free SSL / TLS certificate. Will be good can manage domain certificate and maybe also use the certificate for email.
https://letsencrypt.org/ Yes you can use via SSH but you have not visual area where manage this so for not expert user will be good have something integrated in the panel, if possible. Is a suggestion so all can have SSL certificate. ----------------------- PeopleInside 
Web, security, open source passionate. |
| Posted By: husain_bhala on February 27, 2016, 8:30 am | Post: 1 |
|
Hi Marco,
We are aware of Let's Encrypt and are already considering its integration with Webuzo. But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel. They can be used by attackers as well like the one mentioned in this article: http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ |
| Posted By: peopleinside on February 27, 2016, 9:53 am | Post: 2 |
|
Quote From : husain_bhala February 27, 2016, 8:30 am Hi Marco,
We are aware of Let's Encrypt and are already considering its integration with Webuzo. But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel. They can be used by attackers as well like the one mentioned in this article: http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ Thank you for have replied to me! I was not aware of this security issue, thank you for let me know. For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt. ----------------------- PeopleInside
Web, security, open source passionate. |
| Posted By: Termon on July 6, 2016, 1:56 pm | Post: 3 |
|
Quote From : peopleinside February 27, 2016, 9:53 am Quote From : husain_bhala February 27, 2016, 8:30 am Hi Marco,
We are aware of Let's Encrypt and are already considering its integration with Webuzo. But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel. They can be used by attackers as well like the one mentioned in this article: http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ Thank you for have replied to me! I was not aware of this security issue, thank you for let me know. For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt. There's no reason not to use LetsEncrypt. There are no security issues with letsencrypt. The posted link mentions that LetsEncrypt gives free SSL certificate to every website owner in the world as long as you can prove you own the domainname, which is exactly what they advertised. Comodo domain validated SSL certificates are not free and it is better than LetsEncrypts domain validated SSL certificates for website owners in any way. |
| Posted By: Termon on July 6, 2016, 1:57 pm | Post: 4 |
|
Quote From : peopleinside February 27, 2016, 9:53 am Quote From : husain_bhala February 27, 2016, 8:30 am Hi Marco,
We are aware of Let's Encrypt and are already considering its integration with Webuzo. But it is still in Public Beta and also there are many security checks that need to be throughly checked before including it in the panel. They can be used by attackers as well like the one mentioned in this article: http://blog.trendmicro.com/trendlabs-security-intelligence/lets-encrypt-now-being-abused-by-malvertisers/ Thank you for have replied to me! I was not aware of this security issue, thank you for let me know. For now I AM using a Comodo certificate and it's very important to know this issue in Let's Encrypt. There's no reason not to use LetsEncrypt. There are no security issues with letsencrypt. The posted link mentions that LetsEncrypt gives free SSL certificate to every website owner in the world as long as you can prove you own the domainname, which is exactly what they advertised. Comodo domain validated SSL certificates are not free and it is not better than LetsEncrypts domain validated SSL certificates for website owners in any way. |
| Posted By: OkijaAmaka on October 7, 2016, 7:45 pm | Post: 7 |
| it means there is no plan for SSL for Webuzo? |
| Posted By: peopleinside on October 7, 2016, 7:52 pm | Post: 8 |
|
Quote From : OkijaAmaka October 7, 2016, 7:45 pm it means there is no plan for SSL for Webuzo? Webuzo support SSL. It means Webuzo team will work for try to integrate Let's Encrypt but this required time and work. ----------------------- PeopleInside
Web, security, open source passionate. |
| Posted By: peopleinside on October 8, 2016, 8:06 am | Post: 10 |
|
Hi,
for now if you have no experience on SSH and Webuzo and Let's Encrypt I suggest to buy a certificate from an external website. You can look at https://www.startssl.com/ or low price ssl certificate and great support in live chat https://www.ssls.com/ Hope it helps. ----------------------- PeopleInside
Web, security, open source passionate. |
| Posted By: OkijaAmaka on October 8, 2016, 12:28 pm | Post: 11 |
|
Quote From : peopleinside October 8, 2016, 8:06 am Hi,
for now if you have no experience on SSH and Webuzo and Let's Encrypt I suggest to buy a certificate from an external website. You can look at https://www.startssl.com/ or low price ssl certificate and great support in live chat https://www.ssls.com/ Hope it helps. will love to learn if you teach you |