Secure by design

[kieppie]

Employment of good security practices when deployed.

• check for OWASP Top-10 & more
• HTTPS by default
• WAF
• Some basic PCI common-sense - even though no card data stored

[Oh-KPond]

I don't know if you'd be interested in this, or if this could help you on this issue, but I thought it was pretty cool. We had someone come to our company and talk about it. https://letsencrypt.org/

It seemed fairly easy to set-up, and their hearts are in the right place. The presentation was mostly 'let's make the internet a safe place, no matter how we do it'.

[p.s. I found your project while searching for a better way to see the tech community in Phoenix, Arizona. We have so many events and groups that overlap each other. I wish there was a better way for groups to at least see each other. It looks like Christchurch has the same kind of problem.]