Security warning

Þorkell · 01-22-2022, 07:45 AM

I got the following when trying to get here in Firefox.

"Firefox detected an issue and did not continue to forums.sjgames.com. The website is either misconfigured or your computer clock is set to the wrong time.

It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details."

Armin · 01-22-2022, 11:15 AM

I am seeing the same. Also on Firefox.

Anthony · 01-22-2022, 11:16 AM

It's expired for other browsers as well, if you aren't seeing it you might just be using http (its been redirecting https to http for a bit).

Aleph · 01-22-2022, 09:31 PM

Refresh, this should be handled.

Whitestreak · 01-23-2022, 03:21 PM

Quote:

Originally Posted by Aleph

Refresh, this should be handled.

Still getting the "Not secure" warning through Google, BTW

Aleph · 01-24-2022, 10:35 AM

Quote:

Originally Posted by Whitestreak

Still getting the "Not secure" warning through Google, BTW

Are you getting the full-page 'not secure' warning that does not proceed to the site, or are you getting the 'This site is not fully secure' red triangle next to the address bar?

Parody · 01-24-2022, 01:22 PM

Quote:

Originally Posted by Whitestreak

Still getting the "Not secure" warning through Google, BTW

Are you going to https://forums.sjgames.com/ ? Current browsers will always tell you http: is Not Secure; it's not trying to be.

Anthony · 01-24-2022, 01:50 PM

Given that the ad banner is http even when you connect by https, not really possible to avoid a warning.

Aleph · 01-24-2022, 03:22 PM

Given the amount of sub-systems that link to other, older systems that serve some components over http, you're always going to get the minor security warnings about mixed-content until we completely overhaul the forums and install new software.

The primary connection via https and the certificate that encrypts it have been updated, so you should not be getting a bad certificate error any longer (which usually prevents modern browsers from getting through to the page, unless you are manually overriding it ).

Anthony · 01-24-2022, 03:35 PM

Quote:

Originally Posted by Aleph

Given the amount of sub-systems that link to other, older systems that serve some components over http, you're always going to get the minor security warnings about mixed-content until we completely overhaul the forums and install new software.

I would think it's just configuration/database entries somewhere. The only insecure links I get on a standard forum page are

http://www.sjgames.com/img/topbar2.jpg
http://www.sjgames.com/img/forumbann...escenarios.jpg (or whatever ad banner is currently showing)
http://www.sjgames.com/img/newhome04/goldbk.jpg

01-22-2022, 07:45 AM	#1
Þorkell Icelandic - Approach With Caution Join Date: Jan 2005 Location: Reykjavík, Iceland	Security warning I got the following when trying to get here in Firefox. "Firefox detected an issue and did not continue to forums.sjgames.com. The website is either misconfigured or your computer clock is set to the wrong time. It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details." __________________ Þorkell Sigvaldason Viking kittens \| My photos \| More of my photos

01-22-2022, 11:15 AM	#2
Armin GCA Prime Join Date: Aug 2004 Location: Portland, OR	Re: Security warning I am seeing the same. Also on Firefox. __________________ Armin D. Sykes \| Visit my GCA5 blog for updates and previews. \| Get GURPS Character Assistant 5 now at Warehouse 23.

01-22-2022, 11:16 AM	#3
Anthony Join Date: Feb 2005 Location: Berkeley, CA	Re: Security warning It's expired for other browsers as well, if you aren't seeing it you might just be using http (its been redirecting https to http for a bit). __________________ My GURPS site and Blog.

01-22-2022, 09:31 PM	#4
Aleph Administrator Join Date: Aug 2006 Location: The Central Network	Re: Security warning Refresh, this should be handled.

01-24-2022, 01:50 PM	#8
Anthony Join Date: Feb 2005 Location: Berkeley, CA	Re: Security warning Given that the ad banner is http even when you connect by https, not really possible to avoid a warning. __________________ My GURPS site and Blog.

01-24-2022, 03:22 PM	#9
Aleph Administrator Join Date: Aug 2006 Location: The Central Network	Re: Security warning Given the amount of sub-systems that link to other, older systems that serve some components over http, you're always going to get the minor security warnings about mixed-content until we completely overhaul the forums and install new software. The primary connection via https and the certificate that encrypts it have been updated, so you should not be getting a bad certificate error any longer (which usually prevents modern browsers from getting through to the page, unless you are manually overriding it ).