Site not secure?

This area is for information on how the forum works and for posting issues/requests. This is NOT to discuss Spyderco products, service, etc. Please review the two stickied threads PRIOR to posting a new thread!
User avatar
spyderg
Member
Posts: 898
Joined: Wed Sep 24, 2014 12:40 pm
Location: Middle of Canada

Site not secure?

Postby spyderg » Mon Sep 10, 2018 11:14 am

My iPad has been telling me this site is not secure for a while now. I don’t log in much because of it.
If you're wielding the sharpest tool in the shed, who's going to say that you aren't...?

User avatar
TazKristi
Member
Posts: 2907
Joined: Wed Jan 26, 2005 1:00 pm
Location: Golden, CO

Re: Site not secure?

Postby TazKristi » Sun Sep 16, 2018 8:07 pm

spyderg wrote:
Mon Sep 10, 2018 11:14 am
My iPad has been telling me this site is not secure for a while now. I don’t log in much because of it.
Hey, spyderg:
I'm not seeing anything like that but I'm on desktop or Android devices. Could you post a screenshot?

Kristi
There is nothing more important than this one day.

User avatar
Sharp Guy
Member
Posts: 4569
Joined: Tue Jan 26, 2016 2:19 pm
Location: Over here!

Re: Site not secure?

Postby Sharp Guy » Sun Sep 16, 2018 9:28 pm

Hi Kristi,

I saw spyderg's post the other day. I looked into it and saw that my browser (Chrome) said the forum was indeed unsecured (http not https) and didn't think much of it. I figured as long as users weren't entering personal info here why should it matter? The main Spyderco site is secured which makes sense.

I can see this same site info on my PC with Chrome or Firefox and with same browsers on my Android devices. From Chrome on my tablet, there's a little "i" in a circle (information?) in the address bar (finding this is a little different on my phone). When you touch it a little pop up message shows that the site an unsecured (http) address. See the screenshot below.

Image

What interesting is that with Firefox I get basically the same message but it shows that the site is a "https" site but parts ("such as images") are unsecured.

Image

What's more interesting is that the stock Android browser shows that the site is secure. However, if I click "view certificate" it does say that my connection to the site is not private.

Image
Of all the things I've lost I miss my mind the most!

flasharry
Member
Posts: 203
Joined: Sun Dec 18, 2016 3:17 pm
Location: Calgary, Alberta , Canada

Re: Site not secure?

Postby flasharry » Mon Sep 17, 2018 9:23 am

I suspect that your browsers are complaining about things such as 3rd party hosted images, which are part of what can in the HTTPS standard is "mixed content" , so that if the HTTPS page you visit includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, content is deemed “mixed”. The page is only partially encrypted.
"You never know what lonesome is, 'til you get to herdin' cows"

User avatar
MichaelScott
Member
Posts: 2615
Joined: Mon Apr 13, 2015 11:42 am
Location: Southern Colorado

Re: Site not secure?

Postby MichaelScott » Mon Sep 17, 2018 9:27 am

flasharry wrote:
Mon Sep 17, 2018 9:23 am
I suspect that your browsers are complaining about things such as 3rd party hosted images, which are part of what can in the HTTPS standard is "mixed content" , so that if the HTTPS page you visit includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, content is deemed “mixed”. The page is only partially encrypted.
Sounds right to me (an old tech geek). My Safari browsers don’t flag it.
What doesn’t kill you will make you stronger. Except infantry. Infantry will kill you.

“It looked like a stampede of buffalo.” — Runs The Enemy

http://acehotel.blog

User avatar
spyderg
Member
Posts: 898
Joined: Wed Sep 24, 2014 12:40 pm
Location: Middle of Canada

Re: Site not secure?

Postby spyderg » Sun Sep 30, 2018 6:57 am

7EF41893-8861-4D22-A5B0-91599299C266.jpeg
If you're wielding the sharpest tool in the shed, who's going to say that you aren't...?

User avatar
Evil D
Member
Posts: 20141
Joined: Sat Jun 26, 2010 9:48 pm
Location: Northern KY

Re: Site not secure?

Postby Evil D » Fri Oct 26, 2018 5:11 am

I noticed on my phone yesterday a little circle with a lower case i inside it on the left of the site address, so I clicked it and it said my connection is not secured. Kinda interesting. I also get the same message on Firefox (also from Android) and on Chrome on my PC.
SHARPEN IT LIKE YOU LOVE IT, USE IT LIKE YOU HATE IT
~David

User avatar
TazKristi
Member
Posts: 2907
Joined: Wed Jan 26, 2005 1:00 pm
Location: Golden, CO

Re: Site not secure?

Postby TazKristi » Sat Oct 27, 2018 9:49 pm

David,
We don't enforce https on the forum because there aren't any transactions that take place here. I have been able to duplicate what some are seeing but it's due to images on the forum that are hosted elsewhere (just as Michael said above). The site is secure as is the forum. We force the https protocol on the main site but essentially it's overkill on the forum.
There is nothing more important than this one day.

User avatar
SpyderEdgeForever
Member
Posts: 6301
Joined: Mon Jul 23, 2012 6:53 pm
Location: USA

Re: Site not secure?

Postby SpyderEdgeForever » Fri Nov 09, 2018 7:03 am

Kristi, thank you for this explanation because I was wondering along those same lines.

And here is a related question: From what you know, is this true? Someone told me that if a person is making any sort of online financial transaction when purchasing a product such as a knife or anything else from an internet retailer, they should close all other windows and browser windows they have open, except for the secured online purchase window, because, according to this person, hackers can somehow
"piggy back" on other windows, and steal the person's credit card or other personal information. Have you ever heard anything like that?

And so, does this mean that before a person purchases something online, they should first close the window to the Spyderco forum website?


Return to “Spyderco Forum Tech Support”

Who is online

Users browsing this forum: No registered users and 1 guest