Switched to HTTPS
+
+
Par Remi le jeudi 29 septembre 2016, 10:06 - General - Lien permanent
Perhaps you already noticed it, I have switched all the sites for a secured browsing using HTTPS.
So, new addresses are:
- https://blog.remirepo.net/ for this Blog (with an automatic and permanent redirection)
- https://forum.remirepo.net/ for the Forum (with an automatic and permanent redirection)
- https://rpms.remirepo.net/ for the Repository, but classical address stay available.
For the repository, notice that it would only make sense to switch to https by default only if all the mirrors were using it. So, if you want to use the repository in secured mode, you have to select a https mirror, and replace the mirrorlist by the wanted baseurl, please avoid the main site, which is often under high load.
Certificates are kindly provided by Let's Encrypt.
Commentaires
Now, if you want to only use the https mirrors, you just have to replace in the repository configuration file:
by:
Notice: there is only a small set of https mirrors, for now 5.
Thank you, I hope some time in the future everything will be securely encrypted in the internet.
Your SSLLabs grade is B, please try to achieve A or A+ grade.
https://www.ssllabs.com/ssltest/
https://wiki.mozilla.org/Security/S...
https://cipherli.st/
https://securityheaders.io/
Indeed (this was on my TODO list).
Configuration updated, grade is now A.
(A-, probably because I still a recommended cipher suite for backwards compatibility (IE6/WinXP)