Website not secure

[Rortega46]

Today, when I logged into this website a notification saying "website not secure" popped up. How do we get rid of this problem?

[Breakin Away]

I noticed the same thing that last couple days. Not sure when it started, but pretty concerned that I may have been entering login credentials to an unsecure site. I'll continue to use it as long as I don't have to log in again, but going to be real reluctant to enter my credentials again if I get logged out.

Also, I have been having severe login problems for editing the Tech Wiki, and it has been insecure as well. Is is possible that something has gotten hacked and is causing these issues?

[Breakin Away]

Since this thread is dedicated to tech issues with the website, I'll also point out that email notifications of new posts has stopped working for me in the past day. Not sure if this is also connected to the other problems.

[Stu Jackson]

I emailed our webmaster notifying him of your concerns first thing this morning.  Thanks for letting us know.

[Rortega46]

This website is still showing up as not secure.  I am no longer comfortable logging in.  Please alert the webmaster and have them post to this thread when it's secured.

[David Sanner]

It's secure....  even if you're trying to send us money, it's secure.  In the last several months some web browsers have started putting up this alert. They even show this alert for self signed certificates.

What URL have you going to?  http://c34.org/bbs  or  https://c34.org/bbs/  (note the difference, the https is an encrypted connection, http is not and if there's a man-in-the-middle person snooping your network traffic they could potentially see the plain txt of your password)

If it's the former that would explain it.   I just updated a few links to force users (who come in via http) to redirect to https connections.

While on the subject, if you do click on a link in an email thinking it's your bank and the cert is not secure... don't login.   (better yet, never click on a link like that, just type the URL by hand)   

Also, please don't user the same password for c34 or other similar sites as you would for your bank or more secure accounts!    Best thing I've done for my online security is use a password manager.   Here's a free one that has a plugin for popular browsers https://lastpass.com/create-account.php    Others are 1password,  KeePass, StickPasword, etc.    Best part is you only have to remember one password (make it a good one) and every site you visit can have a unique one so if one site is hacked it won't expose your other site.

Happy surfing!

[Rortega46]

Got it.  I've deleted my old shortcut and added one with https.  Good suggestion about using a password manager.  I've been using Dashlane for years.

[Stu Jackson]

Thanks, Dave.