EP36 – Securing your #WordPress website with #SSL – WPblab

This is a replay of the live broadcast with Jason Tucker, Bridget Willard, Kevin Hoffman, Verious Smith III, and Adam Thomson

In:

Weekly Watercooler Discussions about WordPress and it’s community.

199 responses to “EP36 – Securing your #WordPress website with #SSL – WPblab

  1. Kevin Hoffman Avatar

    I was gonna jump on but I didn’t bring my uniform 🙁

  2. Jonathan Denwood Avatar

    Wasn’t Google planning to force people to use Https ? However they seem to have backed off from this position.

  3. Jeff Hester Avatar

    It’s included free with wpengine

  4. Adam Thomson Avatar

    There’s the stigma out there…

  5. David Bell Avatar

    @JeffHester SSL? I have a personal account with them and SSL is not included.

  6. Adam Thomson Avatar

    Dustin Meza said the best thing about WP security at WCOC. “Its bad (plugin) code thats not secure, Its people who dont update thats not secure, but WordPress core is VERY secure”. I’m going to use that for everyone that asks me about WP security from now on.

  7. Bridget Willard Avatar

    @AdamThomson Totally!

  8. Jeff Hester Avatar

    @Cape_Dave I have a pro account… maybe only at that level and above?

  9. David Bell Avatar

    @JeffHester Yeah, that is probably it.

  10. Jason Tucker Avatar

    “The reason this doesn’t work in IE6 is that the server is using SNI to deduce what certificate to return. XP (and thus IE6) doesn’t support SNI in the HTTPS stack. See for details.”

  11. Adam Silver Avatar
  12. Adam Thomson Avatar

    I have a client who sells a lot online, but they leave to Paypal to make the transaction. I use WordFence inc. firewall. Do they need SSL?

  13. Bridget Willard Avatar

    @AdamThomson I believe PayPal has its own.

  14. Adam Thomson Avatar

    So it’s not just transactions…

  15. Bridget Willard Avatar

    @AdamThomson emails etc

  16. Bridget Willard Avatar

    @heyadamsilver yay bye

  17. Adam Silver Avatar

    cya. getting daughter from dance.

  18. Evangelos .T   ✅ Avatar

    ican help get free ssl for your site dm me on twitter if you dont vant pay for it

  19. Kevin Hoffman Avatar

    SSL has some interesting implications for HTTP/2, specifically how we serve assets on WordPress sites.

  20. Adam Thomson Avatar

    Wow there’s def a couple of websites I thought were secure, but I wasn’t thinking about my own access being exploited

  21. Evangelos .T   ✅ Avatar

    if asking for your email is dogey

  22. Adam Thomson Avatar

    I was thinking “why would they need VPN they already get US netflix”… haha

  23. r0ot Avatar

    alomst every thing is exploitable

  24. r0ot Avatar

    free wifi is ok just got to know how to protect yourself

  25. Evangelos .T   ✅ Avatar

    bigest hakers are google nsa

  26. Adam Thomson Avatar

    …Because my upload sucks.

  27. David Bell Avatar

    Thanks all, great stuff. East Coast time, fading fast 🙂

  28. Adam Thomson Avatar

    Oh damn give me like one minute…

  29. Michael Mann Avatar

    love me some CLI 😀

  30. Evangelos .T   ✅ Avatar

    Cracking RC4. On paper, TLS supports a variety of strong encryption algorithms. In practice, about half of all TLS traffic is secured with the creaky old RC4 cipher. And this should worry you –

  31. r0ot Avatar

    onion protocol is kinda sketchy it doesnt always anonymize you

  32. Kevin Hoffman Avatar

    do you need SSL if paypal is offsite

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.