Jump to content

Anyone Getting Security Warnings / Have Concerns About Logging In?


Steve Herschbach

Recommended Posts

You have to create an account and password to join the forum. Just like forums have done since forums existed.

For banking, etc. protecting passwords is critical. If that is the case websites employ SSL, a system designed to make sure a password can't be intercepted by somebody else who is "on the line". Sites that use SSL start with "https" and regular websites start with "http"

Websites running forums do not require this level of protection. Seriously, are you really worried somebody wants to log in on a forum as you and pretend to be you? And if this happened, how long could it go undetected? And who would care anyway? So any forum you have ever joined is not using SSL unless in the rarest of cases.

However, Google decided that ANY website that asks for a password should be using SSL. So Chrome is now popping up warnings about http websites that collect passwords and Firefox followed suite.

https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html

https://arstechnica.com/information-technology/2017/01/firefox-chrome-start-calling-http-connections-insecure/

The fix is not trivial and would mean I need to acquire a SSL certificate for the website (not free) and implement its use. Details here:

https://invisioncommunity.com/news/avoiding-google-security-warnings-r996/

The part of me that knows this is a non-issue is rebelling, but I also figure maybe people are getting the warning and are being put off? It only happens with certain browsers and only when entering passwords, so if you check the "stay logged in" box as I have you never see it. In fact I only became aware of it when somebody emailed me about it recently. Staying logged in is actually a good practice as long as your device is secure, as the fewer times you enter passwords the fewer times they can be intercepted.

What all this DOES NOT mean is that I have some way to access your system or something like that. It is all about password protection.

So while I am going to probably do this anyway I thought I would just ask. Anyone seeing this? Does it worry you when you do?

Link to comment
Share on other sites


I don't see anything about logging on to websites.  I had problems with some Apple apps a few months back when they went to 'two level' security for identity purposes.  Something similar was asked of me for using my Google Chrome browser.

My only message lately is from Microsoft when they tell me Edge is faster than Chrome.

Mitchel

Link to comment
Share on other sites

The problem is limited to the Google Chrome browser. Any other browser will not have the problem. The bonus of choosing another browser is you won't be giving Google all your browsing history. The drawback? You tell me. I use several browsers on several different operating systems and I only keep Chrome browser around for testing purposes. Chrome is the most invasive browser ever made. Your opinion may vary.

Steve you don't have to pay for a Certificate. Lets Encrypt is a free self regenerating Certificate program. No need to pay $30 a year for a Certificate any more.

Google Chrome is now going to be replacing content from outside your domain with security warnings. That means all the linked in pictures and documents on these forums will be replaced with warnings. Shades of the recent Photobucket FU.

It's time to get a certificate or get rid of Chrome browser. As a site owner I'm left with little choice but if I were just a user I would choose to dump Chrome.

  • Like 2
Link to comment
Share on other sites

The reality is Chrome is extremely popular so I basically have no choice but to go https. People already on the forum appear to have little or no issue, but who knows how many people do not join in the first place because of the security warnings. I knew I was going to have to do it so I guess I am just whining. And I hate whiners!

  • Like 1
Link to comment
Share on other sites

Safari on an iPhone - no issue. 

Safari on an iPad - no issue. 

Firefox on a PC - no issue. 

Stay logged in usually although did have to re-log in to something the other day and never saw any warnings. 

Save your cash I reckon :wink:

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...