Hi all, this is a great site but I'm wondering if there is any plan to install an ssl cert and enable https for the site? We may only be sharing innocent doodles here but isn't https just good basic standard practice for web security?

Thanks,
someonenew

p.s. i saw this video recently and thought it is relevant: https://youtu.be/MFol6IMbZ7Y

sorry to bring it up. i hope this doesn't spoil any fun. i just think the site would be better with https.

Well, there is an HTTPS port open and there is a certificate. Of course, it is self-signed so you have to trust it at least once (and then import it to your browser). So technically HTTPS is there, but not proper HTTPS

mine says "Apache is functioning normally" ...wait now i made it worse...

...fixed it again: looks like I had accepted previously though it wasn't functioning as intended in firefox.

i'm going to have to think it over whether or not i want to start accepting self signed certs...

...give me some time...

Fundamentally you can, if you trust the owner. In some case it's better than not doing it. If you are behind a corporate proxy, they can fake plenty of things. The certificate you get from the proxy may not be the one from the server, and the proxy can then forge the certification chain. But if you download/install the server certificate (when you are not connected to it through that proxy of course), your browser will notice the mismatch.

Which doesn't mean that GC could not use LetsEncrypt to get a proper working certificate.

That would be nice.