Install guide wget over http?
#1
Install guide wget over http?
Why is the sentora.org site not secured by ssl? How do I determine the download script is authentic without it?
Reply
#2
RE: Install guide wget over http?
You can download from github if you are concerned
Reply
#3
RE: Install guide wget over http?
Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

Code:
<a href="https://github.com/sentora/sentora-core/archive/master.tar.gz" class="hover-color">Latest development snapshot (.tar.gz format)</a>
-TGates - Project Council

SEARCH the Forums or read the DOCUMENTATION before posting!
Support Sentora and Donate: HERE

Find my support or modules useful? Donate to TGates HERE
Developers and code testers needed!
Contact TGates for more information
Reply
#4
RE: Install guide wget over http?
(07-07-2020, 12:59 PM)TGates Wrote: Also, the d/l link grabs directly from our github which is secure.
If you inspect the link you will see:

Code:
<a href="https://github.com/sentora/sentora-core/archive/master.tar.gz" class="hover-color">Latest development snapshot (.tar.gz format)</a>

I understand both replies, but, in 2020, having *any* unsecured/unverified content seems both unwise and dangerous. What is the reasoning behind not adding SSL protection to the site and primary install script?
Reply
#5
RE: Install guide wget over http?
(07-28-2020, 07:23 PM)Architects in Enfield Wrote: try github if you are concerned about the security

Thank you for the reply, but it doesn't answer my question: What is the logic behind having an insecure site, especially a site for server software which *must* be secure? With the ease and (no) cost of Let's Encrypt, it just makes no sense in 2020.
Reply
#6
RE: Install guide wget over http?
(07-30-2020, 03:23 AM)edavidf Wrote: Thank you for the reply, but it doesn't answer my question: What is the logic behind having an insecure site, especially a site for server software which *must* be secure? With the ease and (no) cost of Let's Encrypt, it just makes no sense in 2020.

I think they have not activated SSL on their website that's why it doesn't have HTTPS in the Website URL.
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
apt-get install mod_ssl ERROR CMs222 9 32 ,192 11-11-2022, 09:14 PM
Last Post: zustudios
SSL install breaks apache service EGOSKY123 1 5 ,525 10-28-2020, 12:12 AM
Last Post: iraqiboy90
Having both HTTP & HTTPS (Port 443 and Port 80) sites on a server dsmarter 14 52 ,089 08-22-2020, 02:49 PM
Last Post: kenzopoker1

Forum Jump:


Users browsing this thread: 1 Guest(s)