My website hosted by fastmail is only http ?

[Terry]

Why is my fastmail website only http surly in today's environment it should be https my website cant be opened as their antivirus blocks it.

sadly you cant change the http to https.

[hadaso]

I see some problems with certificates of some websites I have on Fastmail's file storage: both with my own domains and with Fastmail's domains(that are redirected to subdomains of user.fm).
It seems that with user.fm the certificate is for *.user.fm and some browsers don't like it, but I also saw one instance where going to https://subdomain1.mydomain.tld generated a complaint by the browser that the certificate issued belongs to subdomain2.mydomain.tld.
I cannot investigate more deeply right now because my desktop PC right now is behind a corporate firewall that mangles certificates and firefox on my phone treats me like a child (just says "this looks dangerous, you should back off" and does not provide any real info about the certificate).
Frankly I don't see what's the advantage of https over http for static websites like those that can be hosted on Fastmail's file storage. One cannot collect visitors' data using these websites except be redirecting the visitors to a site that's hosted elsewhere. And anybody can buy a certificate identifying a domain name. Having a valid certificate doesn't mean that the owner of the domain or website is not malicious.

[Terry]

I was just disappointed that the http is very insecure and out of date, we are in 2023.

[hadaso]

Originally Posted by Terry

I was just disappointed that the http is very insecure and out of date, we are in 2023.

http is 32 years old.
https is 29 years old.
Not a big difference.
Email is more than 50 years old and is not outdated.

[Bamb0]

Originally Posted by Terry

I was just disappointed that the http is very insecure and out of date, we are in 2023.

You have drunken the Koolaid Terry. Let the scare tactics bother you!!


Nothing at all wrong with HTTP!!

Not to worry my friend,things are ok!!

[n5bb]

You are only forced to use http: if you create the website at a Fastmail-owned domain. If you have your own domain which is hosted at Fastmail, you will be given the choice to use that domain with https:. See:
https://www.fastmail.help/hc/en-us/a...-Let-s-Encrypt

Bill

[Terry]

Yes Bill but Why no https as a STD

[n5bb]

Originally Posted by Terry

Yes Bill but Why no https as a STD

Terry, I don’t know all the technical and business reasons they don’t allow that directly. I’m pretty sure it has to do with security of Fastmail and all of their users and details on how they can issue security certificates.

But please read carefully the instructions and you will see a work-around:
https://www.fastmail.help/hc/en-us/a...t-up-a-website
So you can use the url https://user.fm/username.fastmail.com (if your account is at the fastmail,com domain),

Does that help?

Bill

[Bamb0]

They probably didnt think of having the personal websites HTTPS .. Its amazing they still havent thought about it though.. (Probably others like Terry who would rather use HTTPS)

[hadaso]

Originally Posted by Bamb0

... Its amazing they still haven't thought about it though...

I'm quite sure they thought about it a lot, and haven't found a technical solution that works well. I think this was discussed here in the forum many years ago, when Fastmail employees and owners where still active on the forums (I know someone that's quite proficient in digging up old threads ).
Then trying to use https with a website hosted under a fastmail domain the warning I get is that the certificate served is only valid for user.fm and for *.user.fm. SO the difficulty might be that they cannot get thousands of certificates for various third level and fourth level and fifth level subdomains of user.fm.

[Terry]

Originally Posted by hadaso

SO the difficulty might be that they cannot get thousands of certificates for various third level and fourth level and fifth level subdomains of user.fm.

Yes that must be the reason.