The security really does two things: 1. prevents passwords from being stolen (including yours) and 2. gives users some notion that the site is powered by who it claims to be.
You really should have encryption on the login screen at least.
Well, the thing is other people's accounts maybe can't hack the site, but if their accounts are stolen on your site and if they re-used a password maybe their accounts on other sites will also be compromised
@Cerberus It's not that unlikely and it's not just the admin password and down the road if changes are made and features added you'll be glad to have it.
@Mr.ShinyandNew安宇 Well, everything else is really just not important. But I'll get it is it's easy and free. I'm just wondering about maintenance and errors. I've heard cases where websites became inaccessible when they misconfigured SSL.
Your website becomes unavailable when the computer answering to a particular domain presents an invalid certificate (expired or revoked) or a certificate that isn't signed for that domain name
Right now your site's SSL is using a hosting company's certificate
so if the browser ignores that the names don't match it can still be used for secure (encrypted) data transfer but the browser isn't sure who it's talking to
If you create a new cert for your domain and install it on a new host, any traffic that reaches that new host will see the new cert, and if it's valid, it'll work
So it's not possible for e.g. the browser to complain when a domain presents the wrong certificate or no certificate at all, if it's registered somewhere(?) that the domain should have a certificate?
@VadimGalygin Yes, I'd need to get the certificate from the hosting company, then use a Wordpress plugin to apple the certificate to the site, it says.
So that plugin basically does what I thought it would do: rewrites links for hosted wordpress, which is mostly useful when the wordpress host isn't on the edge of the network
@Mr.ShinyandNew安宇 So suppose I did something wrong, or some Wordpress plug-in fucks something up, and the site doesn't work any more. Can I restore the entire situation to the way it was?
I guess what could go wrong is if somehow the SSL plugin on wordpress forces your browser to only use the HTTPS connection and simultaneously forces your browser to reject an invalid certificate.
@VadimGalygin In the shared hosting, in the hosting company's back-up system, on my hard drive, on my external hard drive. And the actual content (the magazine contents) are also backed up at Google and on other computers with the editing staff.
English Language & Usage: Multi-Layer…
English Language & Usage: Multi-Layer…