[Act] https?

[Sébastien Aperghis-Tramoni]

Detlev Hauschildt wrote:

> And hello for the 3rd time!
> 
> My 3rd issue is https. We got some feedback from tpc-2017-amsterdam
> users that they find it strange that ACT only has http, but no https.
> Is https at all feasible?

Originally, the reason is that Act being coded to handle each site
on its own, it would require us to have as many certificates as
we serve domains. I think we had about 30 on the biggest years.
That would have costed a lot of money.

A solution would have been to use HTTPS only for the authentication,
and put that part on a dedicated domain. However, this required
delving into how Act handle authentication, and nobody tried.

Nowadays, Let's Encrypt is a cheaper alternative to the first
solution. I began looking into that last year, then was distracted
by more urgent things. I'll try to install it.

-- 
Sébastien Aperghis-Tramoni

Close the world, txEn eht nepO.