Thinking Posted March 21, 2020 Posted March 21, 2020 The last two times I came to this site, this page appeared and I had to click on the Accept the Risk and Continue Button. Did anybody else see this page?
Robert F. Smith Posted March 21, 2020 Posted March 21, 2020 (edited) 35 minutes ago, Thinking said: The last two times I came to this site, this page appeared and I had to click on the Accept the Risk and Continue Button. Did anybody else see this page? Just accept the risk. This board has just been installed on a new, secure server. After your initial approval, you shouldn't get that message anymore. In your case, it may be necessary to click on the URL as a bookmark. Edited March 21, 2020 by Robert F. Smith 1
Calm Posted March 21, 2020 Posted March 21, 2020 (edited) Is the new server secure? I don't remember exactly what Nemesis said, just that we were switching and there might be issues for some that would be quickly resolved. That thread is gone so I can't check, I assume to avoid confusion. Edited March 21, 2020 by Calm
Calm Posted March 21, 2020 Posted March 21, 2020 (edited) Quote Check the SSL Certificate Look at the URL of the website. If it begins with “https” instead of “http” it means the site is secured using an SSL Certificate (the s stands for secure). SSL Certificates secure all of your data as it is passed from your browser to the website's server.Nov 26, 2014 https://www.digicert.com/blog/buy-site-know-website-secure/ There is an "s" there now, so looks secure. There is also a little padlock I can't remember if it was there or not before....which I have been told was a sign of secure, but have no clue personally. Edited March 21, 2020 by Calm
Popular Post webbles Posted March 21, 2020 Popular Post Posted March 21, 2020 10 hours ago, Calm said: https://www.digicert.com/blog/buy-site-know-website-secure/ There is an "s" there now, so looks secure. There is also a little padlock I can't remember if it was there or not before....which I have been told was a sign of secure, but have no clue personally. They've installed a self-signed certificate. Basically, it ensures that the communication between your machine and their server is encrypted and no one can view it. Unfortunately, since it is a self-signed certificate, your browsers can't verify it. They don't know if the server mormondialogue.org created the certificate or if some random hacker created the certificate and is "sniffing" your traffic. So when you first access mormondialague.org, your browser is telling you that it doesn't know if the certificate is a hacked certificate or if it is the correct certificate. Technically, you should evaluate the certificate yourself to see if it is what you expect. Only once you've evaluated the certificate should you continue. Once you've continued through the "error", most browsers will remember that you've accepted this unknown certificate and will not ask you again. But if you see another certificate error later on, that could be a sign that someone is trying to decrypt the communication and see what is in it. The reason most sites don't have certificate warnings is because they obtain a certificate that is signed by a "certificate authority" that is accepted by the browsers. These "certificate authorities" are required by the browsers to not sign bad certificates. Some certificate authorities have been revoked because of mistakes that they made. If a certificate is signed by one of these certificate authorities, then the browser assumes that your connection to the website hasn't been hacked and that the connection is secure. I'm curious why Nemesis didn't get a certificate through "Let's Encrypt". They provide free certificates and are accepted by most browsers. 6
Nemesis Posted March 21, 2020 Posted March 21, 2020 We redirected the site to a self signed certificate secure server. So because we are using a self signed certificate it gives you a warning. If we would have paid for a secure server certificate you would not be getting that warning. It only needs to be answered once and it will be added to your trus.ted sites list. We did this to ensure encryption between the site and client.
Nemesis Posted March 21, 2020 Posted March 21, 2020 Quote I'm curious why Nemesis didn't get a certificate through "Let's Encrypt". They provide free certificates and are accepted by most browsers Because I didn’t think of it while I was setting up the server.
Teancum Posted March 21, 2020 Posted March 21, 2020 13 hours ago, Thinking said: The last two times I came to this site, this page appeared and I had to click on the Accept the Risk and Continue Button. Did anybody else see this page? Yes. I wondered what was going on.
ALarson Posted March 21, 2020 Posted March 21, 2020 3 minutes ago, Teancum said: Yes. I wondered what was going on. Same for me. I thought the site was down. 2
mfbukowski Posted March 21, 2020 Posted March 21, 2020 After "accepting" the risk I still get a warning. I pretty much use Chrome exclusively, and I'm a big fan of Chromebooks.
Stargazer Posted March 21, 2020 Posted March 21, 2020 2 hours ago, webbles said: I'm curious why Nemesis didn't get a certificate through "Let's Encrypt". They provide free certificates and are accepted by most browsers. All of my sites use "Let's Encrypt". Works great with every browser I've tried it on.
webbles Posted March 21, 2020 Posted March 21, 2020 29 minutes ago, Stargazer said: All of my sites use "Let's Encrypt". Works great with every browser I've tried it on. Yeah, I have most of my sites using Let's Encrypt as well. With the deprecation of the special UI for "Extended Validation Certificates", I think paid SSL certificates for websites is going to disappear. And with SNI, we no longer need dedicated IP addresses to run an encrypted website. It has made it a lot easier and cheaper to get encrypted websites.
Nemesis Posted March 21, 2020 Posted March 21, 2020 Once I install it I’ll Post an update. 2 hours ago, webbles said: Yeah, I have most of my sites using Let's Encrypt as well. With the deprecation of the special UI for "Extended Validation Certificates", I think paid SSL certificates for websites is going to disappear. And with SNI, we no longer need dedicated IP addresses to run an encrypted website. It has made it a lot easier and cheaper to get encrypted websites.
Hamba Tuhan Posted March 22, 2020 Posted March 22, 2020 6 hours ago, Nemesis said: Add it to trusted site. How does one do that? I'm getting the warning each time. 1
webbles Posted March 22, 2020 Posted March 22, 2020 2 hours ago, Hamba Tuhan said: How does one do that? I'm getting the warning each time. It depends on your operating system. I'd search online for "chrome auto accept self signed certificate". You basically have to export the certificate from the site and then add it to your system's certificate list. Each operating system uses a different certificate system. 1
Stargazer Posted March 22, 2020 Posted March 22, 2020 12 hours ago, Hamba Tuhan said: How does one do that? I'm getting the warning each time. In Chrome I got a warning, then once I clicked on the Advanced link it took me to a Chrome window which allowed me to tell it full speed ahead and damn the torpedoes. But Nemesis says he's going to install a certificate, so maybe you don't need to worry about it after a bit...
Stargazer Posted March 22, 2020 Posted March 22, 2020 20 hours ago, mfbukowski said: After "accepting" the risk I still get a warning. I pretty much use Chrome exclusively, and I'm a big fan of Chromebooks. Like you, I use Chrome most of the time, but after accepting the risk I didn't get any more notifications.
Stargazer Posted March 22, 2020 Posted March 22, 2020 15 hours ago, Hamba Tuhan said: How does one do that? I'm getting the warning each time. This should help: https://www.techwalla.com/articles/how-to-trust-a-website-in-my-browser 1
Navidad Posted March 22, 2020 Posted March 22, 2020 I also am getting the warning. I thought perhaps it was because I, as a non-member am a security risk to the forum! 😃 2
mfbukowski Posted March 22, 2020 Posted March 22, 2020 7 hours ago, Stargazer said: Like you, I use Chrome most of the time, but after accepting the risk I didn't get any more notifications. Right now, at the top of this page, it is warning me of a potential hazard risk
JAHS Posted March 23, 2020 Posted March 23, 2020 On 3/21/2020 at 5:38 PM, Hamba Tuhan said: On 3/21/2020 at 11:04 AM, Nemesis said: Add it to trusted site. How does one do that? I'm getting the warning each time. I added it to trusted sites and still get the warning. When I tell it to continue, at the top of the page there is a red "! Not Secure" warning.
Nemesis Posted March 23, 2020 Posted March 23, 2020 2 hours ago, JAHS said: I added it to trusted sites and still get the warning. When I tell it to continue, at the top of the page there is a red "! Not Secure" warning. This should be resolved now.
Recommended Posts