Sorry if dumb question, I STF but no luck. In Chrome 87.0.4280.67 (Official Build) (x86_64) and FF 78.5.0esr (64-bit) -- up to date browsers -- each browser shows this site as not secure. When I log in here, it gives me a warning that my pw may be compromised or whatever. Am I missing something? Why is it showing MRF as not secure? I've been concerned about this for awhile, and today I just noticed an Apple iOS warning that said my pw for this site is compromised, showed up in a data leak.

I'm on a '10 MBP on El Cap. I don't recall this happening on other web sites. Thanks.

......many are.....'insecure'.....

---

_____________________________________

I reject your reality and substitute my own!

The web is moving over (or arguably has moved over) to using https/SSL, which means it uses a digital certificate to authenticate the identity of the website and encrypt any information (such as a password) that is passed to the server. If a site doesn't use SSL, that means if you type in your password it will be passed in the clear which can easily be intercepted.



Edited 1 time(s). Last edit at 11/24/2020 10:41AM by Bixby.

Quote
Bixby
The web is moving over (or arguably has moved over) to using https/SSL, which means it uses a digital certificate to authenticate the identity of the website and encrypt any information (such as a password) that is passed to the server. If a site doesn't use SSL, that means if you type in your password it will be passed in the clear which can easily be intercepted.

Well that gets to I guess the heart of my question - this https/SSL migration began a few years ago IIRC ...but this site is not secure? Zero offense meant to anyone...but that just does not seem right.

I asked the same question a while back but don't think I got a satisfactory answer.

Larry?

---

Disclaimer: This post is checked for correct spelling, punctuation, and grammar. Any attempts at humor are solely the responsibility of the author and bear no claim that any and all readers will approve or appreciate said attempt at humor.
My name is DP, and I approve this message.

"Show me the man and I’ll show you the crime."- Lavrentiy Beria

HTTP vs HTTPS. Managing a security certificate is a pain in the tush. Y'all aren't putting super secret personal information on the phorum, are you ?

Quote
SteveO

Quote
Bixby
The web is moving over (or arguably has moved over) to using https/SSL, which means it uses a digital certificate to authenticate the identity of the website and encrypt any information (such as a password) that is passed to the server. If a site doesn't use SSL, that means if you type in your password it will be passed in the clear which can easily be intercepted.

Well that gets to I guess the heart of my question - this https/SSL migration began a few years ago IIRC ...but this site is not secure? Zero offense meant to anyone...but that just does not seem right.

There was a time when even Facebook didn't use SSL for logins. This site existed before then.

The vast majority of sites are not "secure". That is changing as time goes on.

What are you wanting to secure? Yes, encrypted password transmission would be nice. But do you want your posts made to be encrypted during the post, even though they end up being completely public once they're posted?

Personally, I'm more worried about which version of PHP this is running.

---

Help MacInTouch: Buy from Amazon? use this link [amazon.com]
Mac News & Info: [macintouch.com] [macnn.com] [tuaw.com]
Mac Benchmarks: [barefeats.com]
Used Mac Stuff [FS/T]: LowEndMac Swap List
Mac Software Updates: [macupdate.com]
Fonts: [dafont.com] [fontspace.com]
Online Computer Store With Mac Support: [macsales.com]



Edited 1 time(s). Last edit at 11/24/2020 11:42AM by M A V I C.

SSL is easy to add to sites at this point - just a layer you can add on top. I'd like to see it done but this place is hosted out of generosity so I can understand why its a lower priority.

---

Quote
Bixby
The web is moving over (or arguably has moved over) to using https/SSL, which means it uses a digital certificate to authenticate the identity of the website and encrypt any information (such as a password) that is passed to the server. If a site doesn't use SSL, that means if you type in your password it will be passed in the clear which can easily be intercepted.

Before doing entire sites with https connections, almost all used SSL connections for password entry and the like. Using an https URL versus an http one is not necessarily anymore secure.

it's been that way for quite some time. i'm not posting critical info here and the password is not used anywhere else so i'm not really concerned.

---

If you want to fix our country, work with us in the states. statesproject.org

"Success isn't about how much money you make. It is about the difference you make in people's lives."--Michelle Obama

yeah... I've always assumed that anything I do here is seen throughout the internet including my username/password. Don't use the username/password used here anywhere else and don't post your credit card & social security numbers and we will all be fine.

No complaining about free services.

It's all good, Larry. Thank you as always for MRF.

---

rj
AKA
Vreemac, Moth of the Future

I thought it was just a reflection on the growing insecurity of MRFers...

Because the connection is not secure. Traffic to and from this forum is NOT encrypted.

Quote
fauch
Because the connection is not secure. Traffic to and from this forum is NOT encrypted.

Quote
rjmacs
No complaining about free services.

It's all good, Larry. Thank you as always for MRF.

To be redundantly clear: I was not complaining about MRF, "no offense to anyone" once again. Mostly wondering if I was missing some setting somewheres.

BIG THANKS to Larry as always.



Edited 1 time(s). Last edit at 11/30/2020 09:42AM by SteveO.