Sinister.ly SSL Report - Printable Version

Sinister.ly SSL Report - Printable Version

+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.li/Forum-Website-Server-Hacking)
+--- Thread: Sinister.ly SSL Report (/Thread-Sinister-ly-SSL-Report)

Sinister.ly SSL Report - localhost - 01-02-2018

Any plans to improve or upgrade the forums SSL in the near future? The sinister.li SSL report is pretty bad:

[Image: orrP.png]

I'm sure it's been mentioned before, but what's your position on creating a tor onion address for the site? It would improve transport security (crypto + anonymity) for your members.

RE: Sinister.ly SSL Report - Noctowl. - 01-02-2018

If there was a onion address I'd be down for that.

RE: Sinister.ly SSL Report - mothered - 01-02-2018

An onion address per se, will have a significant negative Impact on traffic.

The Tor network Isn't the only answer to secure a given board.

RE: Sinister.ly SSL Report - MrSecurity - 01-02-2018

it possess potential benefits, however i agree with mothered,
tor is not the only answer for hardening/securing SL ,

RE: Sinister.ly SSL Report - localhost - 01-02-2018

I didn't mean making sinister.li exclusive to an onion address. I meant as an addition to the .ly domain and alternative for members who prefer anonymity.

Is there a LetsEncrypt cert with HSTS enabled in the near future?

RE: Sinister.ly SSL Report - Blink - 01-02-2018

There was a recommendation a while ago to add a Tor address, but it didn't happen because there's no point.
If you want added anonymity, Tor and VPNs are allowed, and you can use the site through them.

HSTS is always great though

RE: Sinister.ly SSL Report - mothered - 01-03-2018

(01-02-2018, 06:06 PM)localhost Wrote: I didn't mean making sinister.li exclusive to an onion address. I meant as an addition to the .ly domain and alternative for members who prefer anonymity.

I see.

In terms of anonymity per se, I'll state the obvious and suggest to simply navigate through the Tor network. As an added layer of security, run a VPN alongside Tor.