I’ve not read this yet, just passing it along, as it looks really interesting.

I’m not affiliated in any way with this.

ETA: If anyone has read it / bought a copy, a review would be very appreciated.

  • Encrypt-Keeper
    link
    English
    6
    edit-2
    7 months ago

    The site is encrypted but you can also access the site over http. The author hasn’t configured any kind of HTTPS upgrade. This is an easily correctable oversight that a self proclaimed “self hosting expert” should have accounted for.

      • Encrypt-Keeper
        link
        English
        27 months ago

        Or not have the website listen on port 80, or redirect connections from http to https on connect. Lots of very simple ways to correct this problem.