Forum Index > Support & Feedback > Not Secure warning on NWH Apple
 Reply to topic
Previous :: Next Topic
Author Message
Malachai Constant
Member
Member


Joined: 13 Jan 2002
Posts: 15641 | TRs | Pics
Location: Back Again Like A Bad Penny
Malachai Constant
Member
PostMon Apr 08, 2019 10:47 am 
I recently upgraded my Apple devices to iOS 12.2 and now getting this warning in the url window. I do not know if this is in regard to the SSL Certificate already mentioned. First time I have seen it. I always wait a couple weeks before upgrading to check for bugs.

"You do not laugh when you look at the mountains, or when you look at the sea." Lafcadio Hearn
Back to top Reply to topic Reply with quote Send private message
Tom
Admin



Joined: 15 Dec 2001
Posts: 17274 | TRs | Pics
Tom
Admin
PostMon Apr 08, 2019 11:32 am 
I'm guessing it's the lack of https. Oh noes!

Back to top Reply to topic Reply with quote Send private message
Alpine Pedestrian
Member
Member


Joined: 24 May 2007
Posts: 184 | TRs | Pics
Location: Stevens Pass
Alpine Pedestrian
Member
PostMon Apr 08, 2019 4:16 pm 
Same here. I've been getting the not secure notice for several days.

Back to top Reply to topic Reply with quote Send private message
Tom
Admin



Joined: 15 Dec 2001
Posts: 17274 | TRs | Pics
Tom
Admin
PostMon Apr 08, 2019 5:26 pm 
There is probably a setting to turn it off or tone down the warning message. I still haven't seen a compelling reason why sites like this need SSL encryption so not a priority to add it anytime soon.

Back to top Reply to topic Reply with quote Send private message
neek
Member
Member


Joined: 12 Sep 2011
Posts: 2107 | TRs | Pics
Location: Seattle, WA
neek
Member
PostMon Apr 08, 2019 8:22 pm 
Because people are lazy use the same password on multiple sites.

Back to top Reply to topic Reply with quote Send private message
Jaberwock
Member
Member


Joined: 30 Jan 2013
Posts: 721 | TRs | Pics
Location: Bellingham
Jaberwock
Member
PostMon Apr 08, 2019 9:07 pm 
Tom thank you for preserving the website. Am concerned it would bog down my Hayes 1200 if you implemented the httpS.

Back to top Reply to topic Reply with quote Send private message
Tom
Admin



Joined: 15 Dec 2001
Posts: 17274 | TRs | Pics
Tom
Admin
PostMon Apr 08, 2019 10:02 pm 
The plan is to migrate the forum to new software in 2019 which is much higher priority from a security standpoint. Even if we implemented https right now there would still be warning messages due to mixed content (embedded http images). The newer software will play nicer in that regard.

Back to top Reply to topic Reply with quote Send private message
Brian Curtis
Trail Blazer/HiLaker



Joined: 16 Dec 2001
Posts: 1635 | TRs | Pics
Location: Silverdale, WA
Brian Curtis
Trail Blazer/HiLaker
PostTue Apr 09, 2019 8:28 am 
The mixed content problem can be easily fixed with a simple query or dump, search and replace, and reload. If you will be upgrading the board software it will be a worthwhile goal to implement the ssl certificate at the same time. Depending on your host, the free Lets Encrypt certs can be a good option.

that elitist from silverdale wanted to tell me that all carnes are bad--Studebaker Hoch

graffiti
Back to top Reply to topic Reply with quote Send private message
Joey
verrry senior member



Joined: 05 Jun 2005
Posts: 2597 | TRs | Pics
Location: Redmond
Joey
verrry senior member
PostTue Apr 09, 2019 10:15 am 
+1 for Lets Encrypt

Back to top Reply to topic Reply with quote Send private message
Tom
Admin



Joined: 15 Dec 2001
Posts: 17274 | TRs | Pics
Tom
Admin
PostTue Apr 09, 2019 1:18 pm 
Brian Curtis wrote:
The mixed content problem can be easily fixed with a simple query or dump, search and replace, and reload. If you will be upgrading the board software it will be a worthwhile goal to implement the ssl certificate at the same time. Depending on your host, the free Lets Encrypt certs can be a good option.

The majority of thumbnails (roughly a half million) are hosted on another domain without SSL. It isn't practical to pipe the thumbnails (would significantly impact page loads for TRs with lots of images). The plan is to get the forum and images on the same domain when we upgrade the software and add SSL at that time. We could implement SSL for both domains now, but it's a non-trivial effort with trivial benefits (IMHO) so focusing on upgrading to more secure software to better secure the site first.

Back to top Reply to topic Reply with quote Send private message
Josh Lewis
Send that Summit



Joined: 01 Nov 2007
Posts: 4706 | TRs | Pics
Josh Lewis
Send that Summit
PostSun Apr 28, 2019 1:28 am 
At home https doesn't do much. However when traveling aboard using a public WiFi I won't login to a website unless it has a https prefix due to cyber interceptions. There are other benefits including search engine optimization boosts. If NWHikers did not have a login it wouldn't matter much.

Back to top Reply to topic Reply with quote Send private message
TokyoTessie
Member
Member


Joined: 28 Jan 2005
Posts: 480 | TRs | Pics
Location: Back in the shadow of Tahoma again!
TokyoTessie
Member
PostSun Oct 17, 2021 4:11 pm 
I havenít been on the NWHikers website for many, many years. Just want to let you know that my very secure router will not let me sign into this website through my home internet, whether it is on my hardwired desktop or wirelessly on my iPhone or iPad. I get this very dire-sounding pop-up which I canít override, then my Orbi sends me a nasty message. Iím only able to access NWHikers on my phone using cellular data. Whatís up with that? Is there something lurking on here? Or just an over-sensitive security system?

Back to top Reply to topic Reply with quote Send private message
Tom
Admin



Joined: 15 Dec 2001
Posts: 17274 | TRs | Pics
Tom
Admin
PostSun Oct 17, 2021 5:07 pm 
Just means that NWH is using http instead of https so your password could potentially be captured during login. As long as you are not using the same password you use on banking sites I wouldn't worry that much. There's probably a setting on your router to allow you to bypass the warning. Eventually we will switch to https but since we aren't storing medical records, processing financial transactions, etc. it hasn't been a priority.

Josh Lewis, TokyoTessie
Back to top Reply to topic Reply with quote Send private message
MCaver
Founder



Joined: 14 Dec 2001
Posts: 5125 | TRs | Pics
MCaver
Founder
PostTue Jul 19, 2022 8:25 am 
HTTPS version of the site is now online.

Josh Lewis
Back to top Reply to topic Reply with quote Send private message
Josh Lewis
Send that Summit



Joined: 01 Nov 2007
Posts: 4706 | TRs | Pics
Josh Lewis
Send that Summit
PostTue Jul 19, 2022 1:22 pm 
Thank you Tom! up.gif up.gif

Back to top Reply to topic Reply with quote Send private message
   All times are GMT - 8 Hours
 Reply to topic
Forum Index > Support & Feedback > Not Secure warning on NWH Apple
  Happy Birthday Mike E., Highwalker's Daughter!
Jump to:   
Search this topic:

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum