How to purchase SSL License

[enwor]

Hello,

I just tried to purchase a SSL license for getting SSL support enabled for non-relaying https access to my tonido. Unfortunately I can't find the item in the store. I remember that there was such an item some time ago, but now I only see the plug and websharepro.

Thank you
Enwor

[madhan]

Sorry, but We no longer sell SSL license product.

[enwor]

Sorry, but We no longer sell SSL license product.

Oh, that's good to know.
So will the "non-relay SSL" function be dropped, or is it possible to use it with an own certificate? At the moment I'm unable to enable it.

Thanks
Enwor

[madhan]

Yes, we will drop it. Please use relay if you want to use SSL, it is available through that.

[agrajag]

Yes, we will drop it. Please use relay if you want to use SSL, it is available through that.

You must be Joking
This must be a kind of bad April 1st Joke

You want to force us to use the Relay, which gives a slow connection (and which is even not forced to use SSL).
Or store our PERSONAL data on an insecure Way????
Is this, what you understand, when you say

Your data is always safe and always stored locally with you

You should call it

Your data is always free for everyone and always stored locally with you

Security is not an OPTION

I would understand to purchace an SSL Lizenz for the users of the Free Tonido SW.
But for the Plug users SSL should be default.
Rise the price up for the Plug and make SSL default.
And also FORCE SSL on the relay-service.
It should not be possible to access the Data in an insecure way.

If the SSL Option is not in one of the next Version i think all users should throw away their Tonidos.
Any cheap NAS which you can get for a few Bugs has more security.

*Edit*
To don't get Missunderstod:
Tonido and TonidoPlug are great products.
But without SSL they are just unusable!

[enwor]

yes, it would be nice if Tonido would support non-relay SSL natively.
Ok, you can use workarounds like light-weight reverse proxys (e.x. pound), but then you run into other problems (iphone app lan switching (this will be fixed in the next version, thanks for that!)).
But basically native SSL support and enforcing https would be nice options (doesn't matter if paid options or not).

bye
enwor

[teleclimber]

I just discovered Tonido. It sounds like it's exactly what I had been dreaming up.

I want to drop the 99$ for the tonidoplug but reading the above leaves me a little cold. How could SSL not be a high priority on something like this? I shouldn't have to use the relay to get standard security.

Can the devs explain the reasons for this and whether this situation will change in the near future?

Thanks.

[madhan]

The reason is simply testing. If we have self-signed ssl it increases all testing we have to perform. We might change this in the future, it all depends upon our customer feedback.

[agrajag]

The reason is simply testing. If we have self-signed ssl it increases all testing we have to perform.

That's a very bad reason. We'ra talking about peaple wich are storing theit personal Data on an device wich has an insecure connection over the Internet! And the only reason is because you're to lazy for testing? This is very very poor!
You can drop the connection without SSL, to short up testing a little.

We might change this in the future, it all depends upon our customer feedback.

Than you should start a Poll about that.

Also i think you have to put Big Warnings on the Tonido Homepage and the Tonido Web-Interface, telling the peaple that the connection they're using is insecure.
Just like you see on the posting from "teleclimber" - for him it was an serendipity, that he found this thread on the Forum. Many users just don't know that thei'ra missing security.
Also there are many user which doesn't know about the difference between HTTP and HTTPS. They just buy it and use it and don't want to get in the technics too deep. They just TRUST you, that this is secure.

To keep SSL as (payable) Option will be OK, too, but than you have to add Warnings (like I said before).

[enwor]

To clarify:
SSL is still available when using the relay URL. It's dropped for the non-relay part.

But I think I'm not the only one who likes to use tonido without the relay.