TOPIC: Secure Website

Someone mentioned this to me, so I have decided to ask.

How would ZARP go about making their website Secure and start with https. Idk too much about it but surley its a good thing to have. I'm just curious of the process required to make it Secure.

www.howto-expert.com/how-to-get-https-se...ssl-on-your-website/

It would mean all the data gets encrypted

I swear there was a post time ago all about our data being encrypted, Correct me if im wrong?

TimeForPug wrote: There was one about our passwords being encrypted

It doesn’t really matter. If you follow good practice you use a different password for all of your stuff. If you don’t you’ll get got that way, way before you would by someone intercepting your traffic. The only thing you should really be worried about over http is sending credit card details. But thats why we use Paypal because they handle that so we dont know anything other then paypal validated your transaction. It wouldn’t hurt changing to use https as I think stuff is starting to drop http support. But its not a huge deal that its still http.

@emp two-factor authentication buddy

write down your password on paper and forget about it

Theres no reason to buy a certificate really unless your site recieves DNS attacks, or credit card information is being used. All ZARP money transactions are done through paypal though.

Roy Harper wrote: Your still an idiot if you use the same password on every site. Even your two factor auth can be bypassed by good old social engineering. Someone calls up your cell provider as you and has them issue them a new sim with your number and suddenly their in. If you use a different password on each site then they have access to only that account.

How zarp installed ssl
1. Went to Cloudflare.com
2. Activated crypto
3. Activated https rewrites

In other means ssl not that hard anymore

Bob The Shoplifter wrote:
Wrong

Chuteuk wrote:

EMP wrote:
Two-factor authentication is not necessarily via phone number? Take Steam's for example.

Edit: Also if your cell provider issues a new sim in a very reckless manner they're a shit one lol. They ask very specific questions, and that was like 3 years ago when I upgraded my sim to a nano.

Chuteuk wrote:
What else did you do? Ssl is allready built in to cloudflare and ur using cloudflare.I guess fixing errors with kuena forums not supporting ssl that well.

Roy Harper wrote:
Lel steam uses phone. I hacked back my own account with a new enabled auth on in under 30 sec

Roy Harper wrote:
2 step still isn't a reliable way of protecting accounts.
Bob The Shoplifter wrote:
You have to get an SSL Certificate, which you usually have to pay for
Roy Harper wrote:
You'll be surprised on how some providers just give up access to it

Bob The Shoplifter wrote:
You cannot properly enable SSL through all parts of the connection is you simply enable it in Cloudflare without installing Certificates on the origin server. Otherwise the connection is still vulnerable to a sophisticated attack.

oof its secure now

Chuteuk wrote:
"sophisticated" No one on zarp is sophisticated