PDA

View Full Version : Not secure















China
14th August 2018, 01:35 AM
Recently I have noticed the forums are listed as not secure is the case or is something amiss my end

BobL
14th August 2018, 08:09 AM
Listed by whom as "insecure"?

Skew ChiDAMN!!
14th August 2018, 12:23 PM
How are you accessing the forum?

From a bookmark? If so, check that the link you are using starts with https://www.woodworkforums.com/ - note the https part. If the URL you're entering doesn't have the s on the end of the 'http" it cannot be a secure connection.

However, I have noticed times that the https 'fails' and it falls back to a http connection. Your browser should notify you of this on loading the page. There are a few reasons this can happen, mostly at the forum's end or their host.

IMHO for a woodwork forum you should be fine...

Now, if it was a session to an online bank, accountant, solicitor or similar, then it's https or nothing. ;)

michael_m
14th August 2018, 12:23 PM
Chrome: the site is a http:// site, not an https:// site, so the browser lists it as "not secure".

China
14th August 2018, 02:57 PM
I am using chrome although this has only come about in the last week or two home page is the same, I will play around and see what I can achieve

warrick
14th August 2018, 04:57 PM
I am using chrome although this has only come about in the last week or two home page is the same, I will play around and see what I can achieveHey China, I was having the same thing as you so I tried the link in Skew's post and that works fine. So it was my bookmark that was the problem. All good now :) :) Rick

Acco
14th August 2018, 11:44 PM
Steven mentioned moving the site over from http to https in another thread about 3 weeks ago and I dare say that if you update your bookmark, that’ll fix the problem you are having.

https://www.woodworkforums.com/f36/managing-attachments-222557-post2098763#post2098763

China
15th August 2018, 12:27 AM
Acco that worked , now can some tell me how t collapse the tab talk list

Acco
15th August 2018, 01:00 AM
Do you mean what I’ve screenshot in this image? I’ve just noticed that I can’t collapse it either using the https server but I can on the http server. I’ll report it to Neil so that he can alert Steven.

440660

China
15th August 2018, 02:09 AM
This one, I give up screen shot does work

Treecycle
15th August 2018, 10:47 AM
Do you mean what I’ve screenshot in this image? I’ve just noticed that I can’t collapse it either using the https server but I can on the http server. I’ll report it to Neil so that he can alert Steven.440660I think China means the collapse a forum button at the top right as it doesn't work for me either. The manage attachments button doesn't work either so I can't post a clip of what I am referring to.Looks like the Thanks and Like buttons don't work either once you move to the new address and the attachments open in a new window.

Acco
15th August 2018, 10:56 AM
I think China means the collapse a forum button at the top right as it doesn't work for me either. The manage attachments button doesn't work either so I can't post a clip of what I am referring to.

Ah, yes.

They aren’t working for me either, just returns the page to the top and yes the manage attachments isn’t working for me on the https site but does on the http site

Acco
15th August 2018, 11:02 AM
The manage attachments button doesn't work either so I can't post a clip of what I am referring to.

You can use the one as shown here to upload images instead of manage attachments.

440678

warrick
15th August 2018, 11:53 AM
Here is two things I have noticed on the https server, there is a gap when you put the mouse over top menu buttons which makes it impossible to move the mouse down.
you can also see that there is no editing buttons, I had to go back to the http version to be able to add the screen shots
Rick


440687



440688

Treecycle
15th August 2018, 02:11 PM
You can use the one as shown here to upload images instead of manage attachments.440678I'm with warrick here, I don't see any editing buttons now.

Acco
15th August 2018, 02:16 PM
Is that via advance or quick reply? The pic from above is via the quick reply

warrick
15th August 2018, 04:55 PM
Is that via advance or quick reply? The pic from above is via the quick reply
There is no quick reply when using https only advanced, I get both on http

Rick

warrick
15th August 2018, 05:02 PM
Another thing to note is that I have just changed my metalwork forums to https and they are working fine so there is definitely something amiss here

Rick

ubeaut
18th August 2018, 09:56 AM
Sorry for the delayed response to this. I've been under the hammer the last few weeks and Steven has been out of the country and also under the hammer.

WWF and MWF were both changed to HTTPS a few weeks ago. However there is still a lot to do to make everything work on both forums. Finding the time to get it all done is currently the main problem.

Both forums have similar problems however MWF is a more basic forum so some things may work on there that don't currently work on here. good example is the the ability to collapse forums as posted above, lack of Edit button, inability to use smiles and quite a few more hidden problems.

All these and other problems are being worked on. However may take some time for all to be sorted out. Changing something that's been the norm for over 19 years just doesn't happen over night.

The HTTP site is as safe as you wish to make it. Anyone stupid enough to put personal information,email address, phone numbers etc in an open forum is asking for trouble. Other than that all member information and other sensitive information email addresses, etc on both forums, has always been taken and kept in a secure section of the forums.

If you want full functionality I suggest using the HTTP site instead of HTTPS and I will put up a Notice asking people to switch to secure site when the forums are fully HTTPS functional.

In the mean time there will be an upgrade of both forums to the latest version some time over the next week or so. Preparation for this has already been done with upgrade to PHP and MySQL and other background stuff.

The insecure site thing shown on Chrome and Firefox has been scaring people on millions of sites for some time now and in many instances for no real reason. WWF has been the same way for over 19 years and to date no one has had their information compromised or had any problems with anything other than the odd spammer back in the early years of the forums. We put on harder registration criteria and punishment to curtail this many years ago and to date there has been:

245571 Spammers Denied Registration
1042 Spammers Permanently Banned
1089 Spammers submitted to StopForumSpam
1126 Spammers submitted to Akismet
12949 Spammy Posts Automatically Moderated

I have personally deleted well over 100,000 individual suspect members over the past 15 years that's around half of our membership base deleted.

So as you can see security for our members is very important on our forums and always has been.

Cheers - Neil :U

BobL
18th August 2018, 10:04 AM
It would be handy if at least the shortcut links between the MW and WW forums on the top of each page were HTTPs links.

A Duke
18th August 2018, 11:43 AM
Hi,
Sorry the "want pictures" was a typo.
I have been a waiting notification to change ever since Steven said he was working on it.
Hope we do not have the fun and games with this upgrade that we have had with some of the previous ones.
Regards

China
18th August 2018, 04:35 PM
Thanks Neil,That"s good to here not being a computer guru I am never sure if it is me or some thing else