localwiki/localwiki — Issue #158: Use SSL out of the box
Author: JayBazuzi
Created: 2012-01-06 04:17:33+00:00
State: open

Consider the principle "secure by default".

When a new localwiki site is created, the default should be to use SSL, at least for logins. If this means that the default behavior will show an error about the unrecognized certificate, that's better than being insecure.

Think specifically about the scenario of someone logging in to a new localwiki from a coffee shop wifi, using a password they use on other sites.