So much this. Proper secure example of GTFO. Any software that has insecure examples doesn't take security seriously and needs to be replaced.
And yes, this includes examples that use http and not https. It's one command to generate a self signed cert, and then it's an [relatively] easy step to replace the self signed cert with a proper cert.
> https://hachyderm.io/users/hazelweakly/statuses/111967729341316770
John-Mark Gurney /
npub1ue…gf6zx
2024-02-21 21:32:24
Author Public Key
npub1ue6mnmj9vvkmmmwlxuzt75f6zljf8zdm7xq078pj47w7mq75eg9sugf6zxPublished at
2024-02-21 21:32:24Event JSON
{
"id": "f2a3d12e1a79927422de1e9d364127633b065663e5128b77f65af0e9a25ea4b0",
"pubkey": "e675b9ee45632dbdeddf3704bf513a17e49389bbf180ff1c32af9ded83d4ca0b",
"created_at": 1708551144,
"kind": 1,
"tags": [
[
"proxy",
"https://flyovercountry.social/users/encthenet/statuses/111971607837643754",
"activitypub"
]
],
"content": "So much this. Proper secure example of GTFO. Any software that has insecure examples doesn't take security seriously and needs to be replaced.\n\nAnd yes, this includes examples that use http and not https. It's one command to generate a self signed cert, and then it's an [relatively] easy step to replace the self signed cert with a proper cert.\n\n\u003e https://hachyderm.io/users/hazelweakly/statuses/111967729341316770",
"sig": "86074e7f64c10b422551373e2cd552925a256221cd0b35227f3eec70216f9aafca5e72628ce5df5c1ea66800389133dc9d9a401b13fc8bc2119aee2c92e7bb3d"
}