Page 1 of 1

MREINFO site potential security risk warning

Posted: Sun Aug 01, 2021 7:44 pm
by Dekard
FYI -

Haven't been on the board in a while and when i went to in Firefox today, got this warning.
Screen Shot 2021-08-01 at 7.38.33 PM.png

Re: MREINFO site potential security risk warning

Posted: Sun Aug 01, 2021 8:07 pm
by kman
Yes, thanks to Google Chrome and any other browsers doing this - they're trying to force all websites to go to secure HTTP (https) instead of just regular HTTP. We haven't implemented security certificates on the website (yet) so the browsers are just complaining that you're going to a good ol' http-based website instead of an https-based website.

Re: MREINFO site potential security risk warning

Posted: Mon Aug 02, 2021 7:41 am
by Ultio
When I needed a certificate for a test site I was running at home I started off with GoDaddy as both registrar for the domain and SSL supplier. They were a good price to start with, but the costs rose over a few years. I now use NameCheap as both registrar and certificate authority.

I can’t fault either supplier. Both have been extremely professional and helpful, but NameCheap win on price. At work we spend hundreds on big name SSL suppliers, but for my little test lab at home I’m more than happy with spending less than $8 per year on a cert.

Re: MREINFO site potential security risk warning

Posted: Tue Aug 03, 2021 1:11 pm
by kman
FYI to all - we now have the site enabled for https so you shouldn't get any more of those warnings.

Right now, going to the regular www.mreinfo.com will redirect you https://www.mreinfo.com - so we're all good there.

However, if you just type in "www.mreinfo.com/forums" you might get sent to the non-https site (which is really the same site, it's just not secured with https). Until we get this fixed, just be sure you go to "https://www.mreinfo.com/forums" and you'll hit the https site.