unsecured web site

[Mike 1017]

Administrators :

Why is the web site not secured ?

Mike

[peteski]

Are you  posting any information here (like credit card, bank account, SS number) or other information that you think should be encrypted?

Secure https simply encrypts data transferred between the website and your computer.  Why should we encrypt info like what kinds of paints we use, or what our latest model purchase was, or photos of our models?  I don't see a problem.  I'm sure SSL certificates cost money, and this website is free to use.

IMO, this thread really belongs in How To Use This Board section.

[Modelbuilder Mark]

If you are concerned, look at the address you have typed in, or clicked link for, if you see this..  

you will notice that the web address simply starts as http://www.modelcarsmag.com/forums

BUT…if you simply ad https:// by typing it in directly in front of the www. It will add security, and you can save THAT link as your favorite, which will then make the address look like this…

 Notice that the exclamation mark went from being in a triangle to a circle, and the words “not secure” disappears.

While this will not fully secure your information, I do agree Peter that you simply do not post any banking info, or SSN, etc. I have been on here 10 years, no issues at all.

[Mike 1017]

Mark

Thank you for the info. It worked.

There was a discussion at work about unsecured websites . The point was that the Links [not secured] on any website could be infected. Be aware of what you click on. So it just got me wondering about my favorite web site.

I also have never had problems here.

Mike

 

[Tom Geiger]

It’s an interesting thing and I don’t know the answer..

A few years ago the host of the NNL East website made a play for securing the site. They said that soon all browsers would reject non-secure sites so we upgraded. To illustrate the point Google Chrome started blocking my access to my own websites!

So we did the big upgrade. The cost is more than we pay for hosting AND domains!  And in the end?  I haven’t been blocked from accessing any website from any browser since then!

[bobthehobbyguy]

The insecure website message simply means that what is said and viewed can be monitored. HTTP is insecure and https means data is being encrypted. Any other security depends on what antivirus software you are using.

As commented changing from http to https means that some security is present. 

At this point in time I use Chrome and can view the site. 

[fumi]

There are free SSL certs, which this site already uses.  By all means use HTTPS, it is already here.

It is probably ok to not encrypt what kinds of paints we use, or what our latest model purchase was, or photos of our models.  But don't forget your password also get passed along to the site when you login in.  Even if you only use it for this site (which you should), it would still be terrible if someone steals it and uses your ID to post something you normally wouldn't.

[Dave Ambrose]

We support both encrypted (https) and unencrypted (http) urls. We have a fully qualified SSL certificate, but the site doesn’t automatically redirect the unencrypted requests, hence the message. 
 

we do have all the appropriate countermeasures in place and I’m going to try to fix the redirection problem when we upgrade the server. 

[Mike 1017]

Guys

Thank you for all your responses

MIKE