Sentora Support Forums

Why is the sentora.org site not secured by ssl? How do I determine the download script is authentic without it?

You can download from github if you are concerned

Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

(07-07-2020, 12:59 PM)TGates Wrote: [ -> ]Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

Code:

<a href="https://github.com/sentora/sentora-core/archive/master.tar.gz" class="hover-color">Latest development snapshot (.tar.gz format)</a>

I understand both replies, but, in 2020, having *any* unsecured/unverified content seems both unwise and dangerous. What is the reasoning behind not adding SSL protection to the site and primary install script?

(07-28-2020, 07:23 PM)Architects in Enfield Wrote: [ -> ]try github if you are concerned about the security

Thank you for the reply, but it doesn't answer my question: What is the logic behind having an insecure site, especially a site for server software which *must* be secure? With the ease and (no) cost of Let's Encrypt, it just makes no sense in 2020.

(07-30-2020, 03:23 AM)edavidf Wrote: [ -> ]Thank you for the reply, but it doesn't answer my question: What is the logic behind having an insecure site, especially a site for server software which *must* be secure? With the ease and (no) cost of Let's Encrypt, it just makes no sense in 2020.

I think they have not activated SSL on their website that's why it doesn't have HTTPS in the Website URL.