https security

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Acknowledged
Archived and Closed

This conversation is no longer open for comments or replies and is no longer visible to community members. The community moderator provided the following reason for archiving: Archived

Google is starting to put increased emphasis on enhancing the user's experience.  Part of that is security and favorable ranking of sites that are secure. What is Homestead doing to allow subscribers to offer https security with Websitebuilder?  Other providers offer this as part of their solution.  Is Homestead planning the same?
Photo of david2953

david2953

  • 6,370 Points 5k badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Drew N

Drew N, Community Manager

  • 252,144 Points 100k badge 2x thumb
The effect at this time is almost nothing. We do continue to watch this issue. We do have it under consideration, but have not done it yet. If it becomes more important then we will revisit the issue.
Photo of Chip1643

Chip1643

  • 312 Points 250 badge 2x thumb
Are the contact forms secure? Is the contact data transmitted to the email server via https using mandrillapp?
Photo of Drew N

Drew N, Community Manager

  • 252,144 Points 100k badge 2x thumb
No, only checkout pages are secured. You can use a 3rd party form that supports SSL
Photo of Chip1643

Chip1643

  • 312 Points 250 badge 2x thumb
I checked the Roundcube email source of these forms. The source shows that the path begins with:

 <img src="https://mandrillapp.com/track/open.php?u=......

So, are you sure the mandrillapp is not sending the message using https? 
Photo of Drew N

Drew N, Community Manager

  • 252,144 Points 100k badge 2x thumb
That may be the app they they are using now, but in order for it to be secure, all phases must be secure. Since Homestead does not support individual SSL certificates at this time, the submission from the site to the transport is definitely not secured by SSL. It is possible that the email is sent encrypted, but it could be unsecured too. I shall look into it. Which site sent that form? I do not believe the same transport is used by Sitebuilder as in Websitebuilder..

This conversation is no longer open for comments or replies.