Subject: Re: [boost] [website] SSL certificate
From: Thomas Heller (thom.heller_at_[hidden])
Date: 2010-08-16 12:53:04
Rene Rivera wrote:
> On 8/16/2010 11:39 AM, David Abrahams wrote:
>> I suppose, pretty soon, we may
>> not need to have any https stuff on our own domain anyway, but as long
>> as we do have to do that, it would be good to have a cert that doesn't
>> raise any alarms.
>
> Hm.. I guess this is a pertinent question.. Do we really need HTTPS
> stuff even now? I mean.. <http://svn.boost.org/svn currently> works. So
> it's just a matter of turning on <http://svn.boost.org/trac>.
The problem is sending usernames and password unencrypted. Which would be
the case when turning of SSL.