make everything more secure!

[kmahar]

I worry that a tool designed to help people being harassed may become the target of harassers. so it would be great to have someone with an interest in security to go through the site and figure out and fix any potential vulnerabilities.

[kmahar]

Some starting ideas for this:

• use HTTPS for all our pages
• sanitize all inputs to make sure malicious code cannot be inserted (this includes messages coming in via email)
• require that users have longer/more secure passwords
• 2 factor auth?

[amyxzhang]

Squadbox is now HTTPS everywhere!