MREINFO site potential security risk warning

Feedback, comments, and suggestions for the website
Post Reply
User avatar
Dekard
Posts: 318
Joined: Wed Dec 14, 2005 12:47 am
Location: Bermuda Shorts

MREINFO site potential security risk warning

Post by Dekard » Sun Aug 01, 2021 7:44 pm

FYI -

Haven't been on the board in a while and when i went to in Firefox today, got this warning.
Screen Shot 2021-08-01 at 7.38.33 PM.png

User avatar
kman
Site Admin
Posts: 4363
Joined: Thu Jan 13, 2005 8:07 pm
Location: Naples, FL
Contact:

Re: MREINFO site potential security risk warning

Post by kman » Sun Aug 01, 2021 8:07 pm

Yes, thanks to Google Chrome and any other browsers doing this - they're trying to force all websites to go to secure HTTP (https) instead of just regular HTTP. We haven't implemented security certificates on the website (yet) so the browsers are just complaining that you're going to a good ol' http-based website instead of an https-based website.

Ultio
Posts: 6
Joined: Mon Jun 14, 2021 10:03 am
Location: High Wycombe, UK

Re: MREINFO site potential security risk warning

Post by Ultio » Mon Aug 02, 2021 7:41 am

When I needed a certificate for a test site I was running at home I started off with GoDaddy as both registrar for the domain and SSL supplier. They were a good price to start with, but the costs rose over a few years. I now use NameCheap as both registrar and certificate authority.

I can’t fault either supplier. Both have been extremely professional and helpful, but NameCheap win on price. At work we spend hundreds on big name SSL suppliers, but for my little test lab at home I’m more than happy with spending less than $8 per year on a cert.

User avatar
kman
Site Admin
Posts: 4363
Joined: Thu Jan 13, 2005 8:07 pm
Location: Naples, FL
Contact:

Re: MREINFO site potential security risk warning

Post by kman » Tue Aug 03, 2021 1:11 pm

FYI to all - we now have the site enabled for https so you shouldn't get any more of those warnings.

Right now, going to the regular www.mreinfo.com will redirect you https://www.mreinfo.com - so we're all good there.

However, if you just type in "www.mreinfo.com/forums" you might get sent to the non-https site (which is really the same site, it's just not secured with https). Until we get this fixed, just be sure you go to "https://www.mreinfo.com/forums" and you'll hit the https site.

Post Reply