site says not secure on e30 zone

[j4gz]

just noticed that on the www.bar it say Not Secure that cant be right can it ?

[pianist]

I said it long time ago but no one took me serious, it happens every time I use my pc to log in, says connection is not secure

[Steve]

Hi all,

There was a browser update awhile back that now alerts the user to any site not using SSL, because of this sites now come up with site 'not secure', this was only needed if the site was taking direct payment and holding address information. which we don't.

You will see a lot of forums that have the same warning, it's nothing to worry about on our site, I can't vouch for other sites though.

/Just as a side note, the new server coming soon will be running SSL.

HTH

[martauto]

Do we have a rough day for the happy event Steve ?

Mart.

[Steve]

Not set in stone yet but it's getting very close.

[martauto]

Not set in stone yet but it's getting very close.

Good to hear Steve, can not wait .

Mart.

[TriggerFish]

Without wishing to be critical, anything that's NOT using SSL (aka HTTPS - the green padlock icon, or websites prefixed with HTTPS, in basic terms) it will also be passing your password over the internet in plain text too...

While general best practice anyway, I'd have a unique password for any site that's not using HTTPS... (unique password for everything is general advice for the internet, and is why SSL (or SSH/other encryption methods) matter when dealing with secure information).



This was me monitoring my log in to this site - you can see whatever password I typed was visible in plain text in a trace of the network comms.

[Steve]

A very fair and valid point, I'm only a few weeks away from starting the transition to the new Zone if people can just bear with me until then.

[TriggerFish]

Not a criticism, just a warning to people of the impacts of not having SSL. For things like this site, with good password management, I don't see it as a big issue on a site like this with no fiscal/sensitive data. (my work is providing hosted PCI DSS compliant solutions, so this sorta thing is a much bigger deal there, when dealing with card data etc).

[steve_k]

Not set in stone yet but it's getting very close.

crap! you just reminded me that i need to do that write up for you

been swamped with a few "personal issues" of late so will get it over to you soon as possible.

[Steve]

Not a problem Steve

No rush, I'll add it whenever it's done.

[aimlessrock]

looking forward to it Steve