Forum Admin Forum is now Discuss Communities
- Thread starter Shawn Gossman
- Start date
FTL
Well-known member
Oh no, Firefox works fine with Let's Encrypt, it's not that. For the record, my site doesn't get an especially good score either (nerdzone.uk) but works fine in FF. It also uses LE.I went to this site by Mozilla:
HTTP Header Security Test - HTTP Observatory | MDN
Test your site’s HTTP headers, including CSP and HSTS, to find security problems and get actionable recommendations to make your website more secure. Test other websites to see how you compare.observatory.mozilla.org
Put in my domain name and scanned it.
Got this as a response:
View attachment 279047
I think Mozilla doesn't recognize "Let's Encrypt" as a trusted source. If so, that's odd. It's a reliable NPO-based certificate issuer that loads of websites use.
I could be wrong but that is what I suspect...
The scan tool's message "This site uses an untrusted or invalid certificate" shouldn't be ignored and is why FF is reporting the site as insecure.
Last edited:
FTL
Well-known member
@GW2 Nothing wrong with that. However, if you're not familiar with Let's Encrypt, it's worth checking it out and seeing if it's for you.
Key features:
EDIT
And then there's this. Oh dear...
medium.com
Key features:
- Completely free
- Backed by the biggest names like Amazon, Microsoft and Oracle. Note that XF Cloud uses them for their clients too, so that's a reliable endorsement as well
- Completely automated certificate installation and renewal. Basically, set it and forget it. Note the initial setup can vary in complexity though depending on the server you're using
- All SSL certs expire after 3 months, making them more secure against hacking
Let's Encrypt
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.
letsencrypt.org
EDIT
And then there's this. Oh dear...
Why Let’s Encrypt is a really, really, really bad idea…
Did I mention it was a really bad idea???
Last edited:
MQK8
Well-known member
I had the same exact problem, Chrome, Microsoft and all browsers showed site secure except for Fire Fox, I couldn't figure it out. So I simply revoked (deleted) the key in Cloudflare, created a new key in Origin in Cloudflare and updated the Certificate and Private key in my cpanel under the appropriate domain, and it's worked ever since. Worth a try maybe.
GW2
Well-known member
Thank you for those tips regarding a free Let's Encrypt SSL certificate. In my case, $50 every 2 years for a paid Trustico SSL cert. is probably worth the cost as it saves our admins (mostly me) the time & effort needed to renew every 3 months. I renew and forget about it for 2 years. Of course after 2 years have passed, I have totally forgotten how to renew it. So, renewing every 3 months does have it's advantages.@GW2 Nothing wrong with that. However, if you're not familiar with Let's Encrypt, it's worth checking it out and seeing if it's for you.
Key features:
- Completely free
- Backed by the biggest names like Amazon, Microsoft and Oracle. Note that XF Cloud uses them for their clients too, so that's a reliable endorsement as well
- Completely automated certificate installation and renewal. Basically, set it and forget it. Note the initial setup can vary in complexity though depending on the server you're using
- All SSL certs expire after 3 months, making them more secure against hacking
Let's Encrypt
Let's Encrypt is a free, automated, and open Certificate Authority brought to you by the nonprofit Internet Security Research Group (ISRG). Read all about our nonprofit work this year in our 2024 Annual Report.letsencrypt.org
EDIT
And then there's this. Oh dear...
Why Let’s Encrypt is a really, really, really bad idea…
Did I mention it was a really bad idea???
FTL
Well-known member
Thing is, the renewal is fully automated, as per my post, so that's not an issue. Do have a look at the website and see what you think of it.Thank you for those tips regarding a free Let's Encrypt SSL certificate. In my case, $50 every 2 years for a paid Trustico SSL cert. is probably worth the cost as it saves our admins (mostly me) the time & effort needed to renew every 3 months. I renew and forget about it for 2 years. Of course after 2 years have passed, I have totally forgotten how to renew it. So, renewing every 3 months does have it's advantages.
I've read again that article and while it does make some good points, I don't think it's enough not to use it. I haven't seen any other articles warning of the risks of LE and since XF uses it in their cloud installations, I'm pretty sure it's ok.
TPerry
Well-known member
Not necessarily... if the site is not using an image proxy, and is serving images linked directly to a non-secure website... this would be a normal issue to show up. It can also happen if whomever set the site up has linked to a non-secure image and there is no automated re-write in place.
Shawn Gossman
Active member
This is what I have for that page. I do have a secret key in there, I just removed it for this purpose 
Shawn Gossman
Active member
Forum Admin Forum is now Discuss Communities.
Updated the URL in the main initial topic.
I made this change for a few reasons:
1. I want to focus on community growth discussions for all types of communities, whether it's using a SaaS like Circle or Mighty Networks, a self-hosted platform like XenForo or PhpBB, or even a social group on Facebook. Online communities come in many different shapes and sizes if you will.
2. Forums are turning into a thing of the past. I think platforms and forums alike should now focus on Community rather than Forum. If you ask most people in branding and entrepreneurial areas today what they think about making a forum, it'll probably be crickets. But if you ask them about making an online community - you'll probably get a lot of agreement.
The term "community" is modern and "forum" is retro. More communities are being created now while forums are fading.
That's why I made this change. We'll see how it works.
I still think platforms like XF, and every other forum software has a chance to continue to thrive as a platform but I feel like more emphasis on community is needed and getting more modern about it.
Updated the URL in the main initial topic.
I made this change for a few reasons:
1. I want to focus on community growth discussions for all types of communities, whether it's using a SaaS like Circle or Mighty Networks, a self-hosted platform like XenForo or PhpBB, or even a social group on Facebook. Online communities come in many different shapes and sizes if you will.
2. Forums are turning into a thing of the past. I think platforms and forums alike should now focus on Community rather than Forum. If you ask most people in branding and entrepreneurial areas today what they think about making a forum, it'll probably be crickets. But if you ask them about making an online community - you'll probably get a lot of agreement.
The term "community" is modern and "forum" is retro. More communities are being created now while forums are fading.
That's why I made this change. We'll see how it works.
I still think platforms like XF, and every other forum software has a chance to continue to thrive as a platform but I feel like more emphasis on community is needed and getting more modern about it.
JoyFreak
Well-known member
I preferred it as Admin Forum but that’s just me.
Arantor
Well-known member
I very much agree with the points here - a community is a group of people, a forum is one form of community space.
TPerry
Well-known member
So, still a community?
Just pulling your chain.... I never liked using the term "community" if the site is more "forum" targeted... it does become a community though when you start expanding a forum into other areas that are not "forum" specific (articles, showcases, directory listings, classifieds, resources and such) that all can participate in.
Even with that point, I still refer to my site as a forum in it's naming format for SEO.
Forsaken
Well-known member
If it were me, I'd have just gone further and have gotten ForumAdminForum.Forum.
FTL
Well-known member
Interesting you should say that, because the cost is around £30 now. Previously a .forum domain would cost hundreds for some reason.
Oh and that domain is free.
FTL
Well-known member
Similar threads
