|
Post by Shadow on Oct 31, 2018 1:35:28 GMT -5
I just wanted to know since I find it tedious that it is getting like that when I go to make a post, I don't trust it when I see stuff like that with a bright red caution symbol. Why is it that when I go to create a studio or create a new thread that I am getting this warning from Google Chrome? If this may be a security breach, you guys may want to look into that to ensure your site users are as safe as they can be when using this forum. No I will not use another browser, it is not the warning that is bothering me it is why the warning shows. Also some of these cookies concern me as well since some of them seem a bit virusy.
|
|
|
Post by Sparkiekong on Nov 1, 2018 14:01:48 GMT -5
I see it in Chrome.
|
|
|
Post by orangemittens on Nov 1, 2018 15:03:49 GMT -5
HTTP and HTTPS are two hyper text transfer protocols used on the internet. The first is older and used to be the one most sites used (I'm not sure which is more frequently used at this time). In the past, HTTPS was mostly used by sites like banks and others that allowed the input of sensitive data to a website. This is because HTTPS allows data moving back and forth between you and a site using that protocol to be encrypted. This is quite important when sensitive financial information is involved.
Google and others are trying to push everyone who has a website to use HTTPS instead of HTTP regardless of the content on the site. This is why you are suddenly seeing the words "Not secure" on all websites that have an HTTP address instead of an HTTPS address. Our site and other HTTP sites that show this phrase in your browser address bar have not changed - the way the address is displayed in your browser bar is the only thing that has changed. That is, the site is no less secure than it was before Google started their campaign to force everyone to get an SSL certificate.
Using HTTPS requires an SSL certificate, and those usually cost money, which is why we don't have one yet. We're examining our options. It may be the case that we can get one for free or an affordable price.
|
|
|
Post by Sparkiekong on Nov 1, 2018 16:08:48 GMT -5
I see more of the https now than the original one. Many places are pushing all kinds of certifications now because of the influx of people hijacking and hacking into so many websites. I just added my little post that I see it in chrome because it can help sometimes narrow down issues if you have extra info.
|
|
|
Post by orangemittens on Nov 1, 2018 16:16:31 GMT -5
Hi Sparkiemonkey, the issue is that, at this moment, the Studio site does not use HTTPS. Until we do, Chrome is going to tack the phrase "Not secure" onto the address you see in your browser bar when you visit the site. We are actively looking into moving to HTTPS even as I type ^^
|
|
|
Post by Shadow on Nov 1, 2018 22:19:19 GMT -5
Sounds good I am glad, I always get nervous when I see the big red caution sign on websites since on chrome that means the website has the highest risk level of not being safe to share certain info on.
Currently I am still seeing the big red caution sign, but thankfully you let me know that you guys are working on that and it is nothing.
|
|
|
Post by orangemittens on Nov 2, 2018 7:41:05 GMT -5
Hi Shadow, the red caution mark you are seeing indicates that information sent and received from the site is not encrypted. Up until a while ago, most sites were not encrypted unless they were expecting people to share sensitive data (like bank account passwords and similar kinds of information). Any site that is an HTTP site (as many still are) will have the red exclamation point because Google has decided to push people into transferring to HTTPS. The site is no more or less secure than it was before you started seeing the red exclamation point. There are many benefits to using HTTPS (the format that allows data encryption), and we're looking into switching as soon as we can.
|
|
|
Post by Shadow on Nov 20, 2018 9:19:58 GMT -5
This can be locked when you admins get a chance. I would like to try getting any posts I made that have not being replied to in awhile as well as are solved locked just to keep things organized.
|
|
|
Post by DefaultUser1234 on Nov 21, 2018 19:46:47 GMT -5
Hey Orangemittens, just in case you were not aware letsencrypt.org/ provides free certificates.
|
|
|
Post by valdesca on Nov 23, 2018 14:42:05 GMT -5
Wow thanks for the info i where also wondering what happened. I see on chrome, when click on not secure, a list of stuff geolocation, camera, voice etc. i have all blocked, it seems to say that S4S web would use all that, but i dont think is right, as your web dont stream music and ask control of midi? nevermind I know now some more about google dominion.
|
|