Folding Forum

Unless there's a credible threat model that isn't already addressed by the cryptographic signatures that are used already, I would say that adopting TLS is pointless. It would complicate the servers (certificate management and configuration), client (adds a dependency on a TLS library), and add ove...

Take https://assign6.foldingathome.org/ for example; in the cert you can read Common Name == 128.252.203.2 rather than Common Name == FQDN which is probably a mistake. Where do you see assign6 used? The AS's in current use are 1 & 2, there is a redirect from assign-cpu for compatibility with ol...

The Assignment Server already supports TLS/https. yes I noticed it later, thanks. But not all of them are correctly configured imho. Take https://assign6.foldingathome.org/ for example; in the cert you can read Common Name == 128.252.203.2 rather than Common Name == FQDN which is probably a mistake...

from the logs, I read the client is connecting to remote servers on port 80 and 8080.
I guess it would be nice to have protocol HTTPS enabled rather than HTTP.
Could you please set it up?
Thanks