Site doesnt work with https!

[sarco3t]

No description provided.

[cskinner74]

Wouldn't be hard for whoever has control of the domain to add SSL with Let's Encrypt. I can help if needed.

[CristopherVidalMachado]

I take this job;

[nicoleiocana]

@the-wendell
If this issue is still open, I would like to make a pull request and fix this bug.

[sbpipb]

I'd like to know what are the application level implications for this, since this looks mostly DNS. please correct me if i'm wrong.

[nicoleiocana]

I'd like to know what are the application level implications for this, since this looks mostly DNS. please correct me if i'm wrong.

Because the site utilizes a sign up form, the email & password that are being sent over the network are vulnerable to being intercepted by malicious users. The site should encrypt that information before it leaves the local browser to resolve this potential security flaw . Moreover, the site should be immune to the critical session hijacking vulnerability surrounding the remember me feature when logging in.