I’ve not read this yet, just passing it along, as it looks really interesting.
I’m not affiliated in any way with this.
ETA: If anyone has read it / bought a copy, a review would be very appreciated.
You must log in or register to comment.
The site is encrypted but you can also access the site over http. The author hasn’t configured any kind of HTTPS upgrade. This is an easily correctable oversight that a self proclaimed “self hosting expert” should have accounted for.
They should just block port 80
Or not have the website listen on port 80, or redirect connections from http to https on connect. Lots of very simple ways to correct this problem.
