Transitioning DLF websites to HTTPS servers

This proposal was agreed to on 12 October 2015 by Bethany.

In October 2015 Bethany and Oliver from DLF asked for help with transitioning DLF websites to secure servers. The DLF would like the diglib.org site to use HTTPS instead of HTTP, so that DLF could be seen to be adhering to its own call for increased privacy of web transactions.

This proposal describes the deliverables, costs, and timeline for assisting the DLF with this effort.

Deliverables

Deliverable 1: transition diglib.org to HTTPS.

Cost: $500

Timeframe: Complete before the end of December 2015

This would include a review of the Media Temple procedures, consulting with DLF staff about what contact information they would like encoded in an SSL certificate for diglib.org, acquiring and installing the SSL certificate at Media Temple, updating WordPress and the wiki to use the HTTPS path to the site, installing redirects from HTTP to HTTPS, and documenting the SSL renewal process for DLF staff.

I would also explore the potential of using a letsencrypt.org certificate if that project actually launches in October or early November. Note that there is a significant chance that Let’s Encrypt does not actually provide tools that will work with hosts like Media Temple. We will have to wait and see.

Scope

Note the SSL certificate would incur an additional cost that is not covered in this proposal.

Summary

As a consultant, I do not charge by the hour. The costs above will be charged as a flat rate. These costs total $500. I will submit an invoice when the work is complete.