Couple of my colleagues, including me, are going to use wiki for writing documentation for our project. Wiki is private, and only I can provide new accounts. Also, there is small chance, that I can give temporal read-only access to third party member.
Currently my site working over HTTP, therefore I have tried to use Let’s Encrypt to get ssl certificate, but it's look like, that my host is blocking that service. Also, there is no access to SSH and some PHP methods.
So, should I be worried, that my connection is not secure? Can I rely on "security through obscurity"? Is there are alternative solutions instead of setting up HTTPS (a free one is preferable)?
I concerned to be secured in 3 things
- Keep content of wiki out of public sight. Description of technical implementation is top priority and should be available only to few selected people. Other info is not so important.
- Keep data from getting removed/corrupted.
- Avoid Man-in-the-middle attacks. Though, I don't sure how critical is this vulnerability in my case