NOT SECURE —*What the ...?

[WhereStream]

Suddenly, I'm getting "NOT SECURE" popping up in the URL bar whenever I come to airforums.com.

Any one else seeing this?

Think I'm going to back away from the forums until this gets sorted out ...

[smithcreek]

Unless the site is asking for personal/financial information it's not a concern. If you want to be extra cautious don't use the same password here as you do at other sites that do have personal/financial information

[Russ Abbey]

Yup, me also. It's been going on for awhile now too.

[Isuzusweet]

There's no such thing as a "secure" website. The NSA, CIA, FBI, FSB, and Chinese secret services can hack into anything they want.
If anything, having an ISP warning you that the site is unsecured is a good thing, as it makes you aware and careful of what personal info you post.
If a website states that it is secure, I would still exercise great caution on what personal or banking info you provide them.
Cheers
Sidekick Tony

[az-streamer]

Mine also.
I use a different unique password for air forums.

[WhereStream]

I'm not worried about someone grabbing my password — it is good for this site only.


My concern is "NOT SECURE" being a warning about something malignant ... such as malware.

[mkcurtiss]

The way most folks divulge information voluntarily these days, via facebook, google, instagram, etc., I feel no threat about websites that are branded "not secure".....nothing on the internet is secure.....nothing. ....nothing on our smart phones is secure either.......nothing.

[overlander63]

Originally Posted by WhereStream

Suddenly, I'm getting "NOT SECURE" popping up in the URL bar whenever I come to airforums.com.

Any one else seeing this?

Think I'm going to back away from the forums until this gets sorted out ...

Originally Posted by WhereStream

I'm not worried about someone grabbing my password — it is good for this site only.


My concern is "NOT SECURE" being a warning about something malignant ... such as malware.

The difference is between "http" and "https". I belong to many forums, and not a single one is "secure".

[WhereStream]

Originally Posted by overlander63

The difference is between "http" and "https". I belong to many forums, and not a single one is "secure".

Sure, "https," we all know that.

But I visit a number of "http" web sites, and this is the only one where my browser warns me, "NOT SECURE."

Can admin weigh in?

[overlander63]

Originally Posted by WhereStream

Sure, "https," we all know that.

But I visit a number of "http" web sites, and this is the only one where my browser warns me, "NOT SECURE."

Can admin weigh in?

How many of those sites are online forums?
I'm pretty sure after a few dozen "weigh ins", they're getting tired of repeating themselves.
If you really want an answer directly from forum staff, go to the bottom of this page, and click the "contact us" button, ask your question, and someone will respond.

[brokeboater]

When I was in business I had a substantial amount of product information my customers and competitors found useful. When I decided to retire I posted all of that information on my old business web site so the folks who were interested could still access that information. My site has now started being flagged with the "not secure" tag because I don't have an SSL certificate. My host called and for a substantial (to me) fee would solve the problem, on a reoccurring yearly basis of course. I looked into doing it myself which is cheap enough but still a hassle. I finally decided to ignore it as my site is free and only provides a service. If folks don't want free stuff it's no big deal to me.

[Wayne&Sam]

I use Safari. It says "Not Secure" on unencrypted sites just as a reminder to you not to use sensitive info. It was added to OS 10.13.4 and iOS 11.3.

[uncle_bob]

Hi

On a site that feeds ads, there is pretty much no way to make it "secure" by the definitions now being invoked by Apple, Google, and the others. Get used to seeing the "notice" on pretty much any ad supported site.

Bob

[UncleBad]

The forum uses HTTPS when authenticating you. HTTP for other content isn’t worrisome.

Use a password manager to make all of your passwords different. I use 1Password on all of my devices. Each password is different, very long and random characters. And I never have to enter a password in a browser or app. Takes a little getting used to but if your worried about security, it’s worth the time, effort and money.

[RJJ]

I often get an malware adware pop-up telling me I've won something... I've reported it to admin, but it's still happening. Don't say it's my phone, because it isn't. I get the pop-up on this site and one or two others. Since this is not a secure site malware is easy for a miscreant to install. FYI I don't get the pop-up on secure sites.😤😡

[on-a-roll]

Let all get up to date. Here are reasons to Always use https at all websites. Helping stop man-in-the-middle attacks is but one of them.



https://developers.google.com/web/fu...nsit/why-https


https://www.eff.org/encrypt-the-web


"Content injection is when someone adds data or code to your communications with an HTTP web page. For example, it's how GCHQ and NSA took over a Belgian ISP's computers. Content injection is also how China took down GitHub with a massive DDoS attack, dubbed "The Great Cannon". Content injection is also becoming popular with ISPs. Verizon injected tracking headers into every request made by their customers. And Comcast injects pop-ups into sites where they don't belong. All of these attacks can be stopped by HTTPS, provided it is implemented and made default on enough sites."

[John&Vicki]

There has been no change - it’s always been this way. There are two classifications of websites: “http” and “https”. The difference is that the former is not secure and the latter is. Most sites have been http, non-secure, forever. Now the there’s an attempt to get site publishers to switch entirely over to secure, https, and the not secure message is an effort to, errr, encourage them to do so by creating little kerfuffles like the one here.

Again, nothing has changed.

John

[WhereStream]

Originally Posted by John&Vicki

There has been no change - it’s always been this way. There are two classifications of websites: “http” and “https”. The difference is that the former is not secure and the latter is. Most sites have been http, non-secure, forever. Now the there’s an attempt to get site publishers to switch entirely over to secure, https, and the not secure message is an effort to, errr, encourage them to do so by creating little kerfuffles like the one here.

Again, nothing has changed.

John

So, my updated Safari browser is doing its part in the switch-to-secure campaign ...