OpenBSD Foundation 2018 Fundraising Campaign

Re:OpenBSD Foundation 2018 Fundraising Campaign by ams6110 on Tuesday March 20, 2018 @03:50PM (#16631903)

Note that these pages are not served via https, and neither is the donations page[1] which contains links to Paypal.

This has been pointed out from time to time on the openbsd "misc" email list but I've never seen a good explanation for why these pages are not secure.

[1] http://www.openbsdfoundation.org/donations.html

[ Parent | on HN ]

Re:OpenBSD Foundation 2018 Fundraising Campaign by hessnovTHR44 on Wednesday March 21, 2018 @01:59PM (#16640710)

I am not related to the OpenBSD team, but just dropped a mail for them and in a few hours I can reach it via HTTPS:

https://www.openbsdfoundation.org/donations.html

awesome people :)

[ Parent | on HN ]

Re:OpenBSD Foundation 2018 Fundraising Campaign by protomyth on Tuesday March 20, 2018 @04:38PM (#16632350)

The PayPal links are https

[ Parent | on HN ]

Re:OpenBSD Foundation 2018 Fundraising Campaign by dullgiulio on Tuesday March 20, 2018 @04:44PM (#16632422)

Doesn't matter. Nothing can be trusted on a plain HTTP page.

It's quite inexcusable today that setting up a certificate is such an inexpensive and easy thing with Let's Encrypt.

[ Parent | on HN ]

Re:OpenBSD Foundation 2018 Fundraising Campaign by cypher303 on Tuesday March 20, 2018 @05:52PM (#16633068)

Agreed. What world are people living in when they present payment links on an insecure page in 2018? Um, no dude. I'm not going to click on your link now, nor will I ever. Byyye.

[ Parent | on HN ]

Re:OpenBSD Foundation 2018 Fundraising Campaign by protomyth on Tuesday March 20, 2018 @04:46PM (#16632455)

The parent made it sound like the PayPal links were also http

[ Parent | on HN ]