"Site Not Secure"

The Purist

Elder Member
Joined
Aug 16, 2004
Messages
2,917
Reaction score
1,480
Location
In my castle by the sea, Trochu, AB
First name
Gerry
Country
llCanada
Noticed this morning that I am receiving bright "red" warning in the site address stating site is not secure and risk of attack is "high"

Some sort of security button not flipped at GS this morning?
 

Sparafucil3

Forum Guru
Joined
Oct 7, 2004
Messages
11,335
Reaction score
5,071
Location
USA
First name
Jim
Country
llUnited States
You're using the http address. Those are always "insecure". When you do banking, you're using the https address. Those are supposed to be secure and involves certificates which cost a lot of money. I tried the https://www.gamesquad.com but I got connection refused. My guess is it is not configured but I am not the site owner. You would have to as @RandyT0001 -- jim
 

Michael R

Minor Hero
Staff member
Moderator
Joined
Feb 4, 2003
Messages
4,622
Reaction score
4,162
Location
La Belle Province
First name
Michael
Country
llCanada
I didn't expect GS to have a https url because it doesn't involve money except for supporters making their contribution. That should be secure, although I do not know if it is. I just looked at BGG for comparison, and it is https, surprisingly to me. FaceBook is secure. CSW is not.
 

zgrose

Elder Member
Joined
Jun 13, 2004
Messages
4,235
Reaction score
948
Location
Kingwood, TX
First name
Zoltan
Country
llUnited States
https everywhere is the target. there is a $ fee to be paid at the moment which is the main driver it isn't everywhere already.
 

WargameHQ

Recruit
Joined
Jun 13, 2020
Messages
28
Reaction score
24
Country
llUnited States
There are free ssl providers out there. SSL everywhere is one, but the leases can expire and need to be renewed. It’s pretty simple so there’s really no excuse not to have one at this point.
 

Sparafucil3

Forum Guru
Joined
Oct 7, 2004
Messages
11,335
Reaction score
5,071
Location
USA
First name
Jim
Country
llUnited States
There are free ssl providers out there. SSL everywhere is one, but the leases can expire and need to be renewed. It’s pretty simple so there’s really no excuse not to have one at this point.
Is it a trusted cert provider? If it is, then no one will get the nasty warning. If it isn't, it's not much better. -- jim
 

WargameHQ

Recruit
Joined
Jun 13, 2020
Messages
28
Reaction score
24
Country
llUnited States
https://letsencrypt.org/

i use it on all the sites I’ve run or manage both personally and commercially.

what makes it great is a little tool called certbot that does the heavy lifting For registration and renewal.
 

WargameHQ

Recruit
Joined
Jun 13, 2020
Messages
28
Reaction score
24
Country
llUnited States
I didn't expect GS to have a https url because it doesn't involve money except for supporters making their contribution. That should be secure, although I do not know if it is. I just looked at BGG for comparison, and it is https, surprisingly to me. FaceBook is secure. CSW is not.
SSL certs don't cost a penny and can be automated.
 

uckelman

Senior Member
Joined
Sep 12, 2011
Messages
714
Reaction score
439
Location
Durham
Country
llUnited Kingdom
Are there any plans to add HTTPS support? A lot of browsers now toss up a scary warning for HTTP, and you can get a Let's Encrypt certificate for HTTPS for free these days. (That's what we use at vassalengine.org.)
 

Cattlesquat

Recruit
Joined
Aug 25, 2020
Messages
5
Reaction score
4
Country
llUnited States
Here is what it looks like full-screen on my browser when I try to come to this site. Every time.

21392
 

Robin Reeve

The Swiss Moron
Staff member
Moderator
Joined
Jul 26, 2003
Messages
19,595
Reaction score
5,557
Location
St-Légier
First name
Robin
Country
llSwitzerland
About twenty spam posts are destroyed by the moderators every day.
 

Robin Reeve

The Swiss Moron
Staff member
Moderator
Joined
Jul 26, 2003
Messages
19,595
Reaction score
5,557
Location
St-Légier
First name
Robin
Country
llSwitzerland
What's the relevance of that to the site using HTTP instead of HTTPS?
I am not learned at that level, sorry.
I tried to give a possible explanation of the warning.
Those spam-bot posts are fraught with links which certainly lead to dangerous sites.
Don't you think that they could be one of the reasons of the warning?
 

uckelman

Senior Member
Joined
Sep 12, 2011
Messages
714
Reaction score
439
Location
Durham
Country
llUnited Kingdom
I've already given the reason for
I tried to give a possible explanation of the warning.
Those spam-bot posts are fraught with links which certainly lead to dangerous sites.
Don't you think that they could be one of the reasons of the warning?
No, those aren't the reason for the warning. The reason is the one I've already given: The site is being served over HTTP instead of HTTPS.

The site admins risk losing a good chunk of their traffic if they don't fix this.
 
Top