Skip to content

回复:SMF 论坛,需要安装一个插件 ​

首次公开证据

打开首次公开证据
查看 1 个交叉存档
来源说明

Published on GitHub in February 2024 as part of Martti Malmi's testimony in the COPA v. Wright trial

那我就开始设置 Drupal。

我不认为我们应该默认让网站使用 https。网站的公共部分使用 https 仍然非常不常见,可能是因为它会引入潜在的技术复杂性、延迟和更高的服务器负载。作为用户,当我随意遇到一个不知名网站时,如果需要花时间验证它的身份,我会有点恼火。对我来说,https 网站似乎更经常加载失败。

重要的是为需要的人提供 SSL。我认为需要 SSL 的人知道可以尝试在 http 后面加一个“s”,看看是否能用。SMF 有一段代码,如果传入的 URL 是 https,就会把所有链接改成 https。

我们可以在注册页面加一条说明:如果需要 SSL,可以随时把 http 改成 https,并批准自签名证书;也可以放一个能完成这件事的链接,TOR 页面上也可以提到。

等情况稳定下来后,我们可以研究获取证书。使用 Class 1 时,一年内不允许任何变更;如果发现当前主机有问题而必须更换 IP,这会带来风险。

我为一位客户做过 Joomla 网站,必须说我更喜欢 Drupal,主要是因为它的管理界面更容易使用,并且集成在主站中。

通过 https 加载图片不正常,方便时我会检查。

直接更改 bitcoin.org 的 DNS 条目更容易,不需要 forum.bitcoin.org。

我们可以看看哪里能获得免费 SSL 证书,比如 http://www.startssl.com/?app=1,这样用户就不会收到自签名证书的安全警告。不过我不知道他们是否为匿名注册的域名提供证书。

谢谢,成功了,我用 SSH 安装了 File Manager。我还把几个主题上传到了 Drupal。我还没有彻底看完所有可用主题。

我看了一些 CMS,Drupal 和 Joomla 都很流行。共识是 Joomla 的主题选择更多,也更容易学习,不过 Drupal 对程序员和定制来说可能更直观。Joomla 更适合 CMS,Drupal 更适合博客。Drupal 的 URL 对搜索引擎友好,Joomla 则不友好。

两者都有可用的 SMF 桥接模块。以后参考,Drupal 的模块叫“SMFforum Integration”。

我今天没有时间配置它,但我创建了一个临时账户“”,密码为“”,对 /var/www/bitcoin 拥有完全权限。你可以通过端口 30000 使用 ssh 或 sftp 访问。

英文原文 ​

展开英文原文

I'll go ahead with setting up Drupal then.

I don't think we should make the site https by default. It's still very unusual for the public part of sites to be https, probably because it introduces potential technical complications, delays and greater server load. As a user I'm a little annoyed when it takes time to verify the identity of some no-name site I casually came across. For me it seems like https sites fail to load a lot more often.

The important thing is to have SSL available for those who need it. Those who need SSL I think know to try inserting an "s" after http and see if it works. SMF has code that changes all the links to https if the URL handed in is https.

We could add a note on the registration page that if you want SSL, you can change http to https at any time and approve the self-signed certificate, or a link that does it, and the TOR page can mention it too.

We can look into getting a certificate later when things have settled down. With Class 1, no changes are allowed for a year, which is a risk if we find issues with the current host and have to change IP.

I've done a Joomla site for a customer, and I must say I like Drupal better, mostly for the admin interface which is easier to use and integrated into the main site.

Images aren't loading properly over https, I'll check it out when I can.

It's easier to just change the bitcoin.org DNS entry, forum.bitcoin.org is not necessary.

We could see if we can get a free SSL certificate somewhere, like http://www.startssl.com/?app=1, so the users wouldn't get a security warning from a self-signed certificate. However I don't know if they give certificates for anonymously registered domains.

Thanks, that worked, I got File Manager installed with SSH. I also uploaded a few themes into Drupal. I haven't thoroughly gone through all the available themes yet.

Looked around at CMSes, Drupal and Joomla are popular. Consensus is Joomla has a better selection of themes and is easier to learn, though Drupal may be more intuitive for programmers and customization. Joomla better for CMS, Drupal better for blogs. Drupal's URLs are search engine friendly, Joomla not.

Both have SMF bridge modules available. For future reference, Drupal's is named "SMFforum Integration".

I don't have the time to configure it today, but I made a temporary account "" with password "" and full permissions to /var/www/bitcoin. You can access it via ssh or sftp at port 30000.

为历史保存,为中文读者整理。每篇档案均附来源与英文原文。