PDA

View Full Version : Logging in this morning... security warning


MattTuck
03-09-2017, 07:46 AM
Not sure if it is a new update with Firefox, but as I logged on to the forum this morning, I got a warning that the site may not be secure.

Probably because the forum doesn't have SSL or other encryption. Not a big deal, just wanted to give the mods the feedback so they know what users are seeing.

AngryScientist
03-09-2017, 07:48 AM
i was going to mention that to Keith too.

i can no longer reach this site from within my work network.

eek

ANAO
03-09-2017, 08:18 AM
Too much bike porn.

ptourkin
03-09-2017, 08:34 AM
I was a little worried when I saw "logging in the morning" - thought it would be a discussion about fiber in our diets.

shovelhd
03-09-2017, 08:37 AM
Expired cert?

superbowlpats
03-09-2017, 03:59 PM
i was going to mention that to Keith too.

i can no longer reach this site from within my work network.

eek

same with me at my work :crap:

Louis
03-09-2017, 04:09 PM
Fine for me at work. (which is probably bad, as this affects my productivity)

kingpin75s
03-09-2017, 04:45 PM
This is not SSL enabled so just a security posture message based on browser and settings I expect.

As a side note some browsers are starting to or have already deprecated SHA1 encryption so expect to start to see more warnings from SSL enabled sites running old protocols. Warnings start in advance of blocking and is by browser.

regularguy412
03-09-2017, 05:29 PM
On a related note: Firefox is dropping support for XP installations.

Mike in AR:beer:

Red Tornado
03-09-2017, 05:54 PM
i was going to mention that to Keith too.

i can no longer reach this site from within my work network.

eek

same with me at my work :crap:

Me too. Been that way for a couple weeks. I was wondering what was going on.

Anarchist
03-09-2017, 06:25 PM
Me too. Been that way for a couple weeks. I was wondering what was going on.

Same here.

No mas.

Cicli
03-09-2017, 06:44 PM
The only security alert I get when I log onto this site is from my bank. :fight:

cmg
03-09-2017, 09:43 PM
I can read the titles to the thread at the work station but it won't let me open them.. what am i to do? work......? boring work without a little distraction. it would be great if i could log in.

Vonruden
03-09-2017, 09:57 PM
Me too, I can't view threads.

guido
03-10-2017, 04:49 AM
I'm getting it too... Now I can stop worrying that they thought I was visiting too often...

MattTuck
03-10-2017, 07:44 AM
This is what it looks like on my end, just in case someone is trying to chase this down.

Red Tornado
03-10-2017, 07:47 AM
I can read the titles to the thread at the work station but it won't let me open them.. what am i to do? work......? boring work without a little distraction. it would be great if i could log in.

This has happened at my work computer with Cyclingtips. Story/article titles appear in a list format, but won't open. I'm not a software/internet guy so don't really know what's changing but something must be. Security related maybe?

oldpotatoe
03-10-2017, 07:58 AM
this has happened at my work computer with cyclingtips. Story/article titles appear in a list format, but won't open. I'm not a software/internet guy so don't really know what's changing but something must be. Security related maybe?

:d

Keith A
03-10-2017, 08:33 AM
Yes, there has been a change with the browsers and everything is going to secure sites...https instead of http. I have looked into this a little bit, but this isn't a trivial change to switch over to this format. Not sure exactly what our course of action will be, but obviously this is something we will have to resolve.

Keith A
03-10-2017, 08:35 AM
BTW, if anyone knows how to work around this temporarily, please let us know.

Red Tornado
03-10-2017, 10:35 AM
:d

I'm not a conspiracy theorist, but........ Thought this might go along with the photo. Different agency, same idea - sort of.
http://www.cnn.com/2017/03/08/politics/james-comey-privacy-cybersecurity/
Edit: How did the photo not stay with the quote?

sw3759
03-10-2017, 11:46 PM
I can read the titles to the thread at the work station but it won't let me open them.. what am i to do? work......? boring work without a little distraction. it would be great if i could log in.

ditto :mad: made my whole week at work suck more than usual.figured the overlords suspected i spent too much time lurking around here.hopefully its just temporary

oldpotatoe
03-11-2017, 05:17 AM
I'm not a conspiracy theorist, but........ Thought this might go along with the photo. Different agency, same idea - sort of.
http://www.cnn.com/2017/03/08/politics/james-comey-privacy-cybersecurity/
Edit: How did the photo not stay with the quote?

Well, of course. If you are hooked to the WWW, you are not 'private'. To be 'private', go off the grid. No phone, no credit card use, no computer to web, nuthin'.

Keith A
03-11-2017, 06:08 AM
ditto :mad: made my whole week at work suck more than usual.figured the overlords suspected i spent too much time lurking around here.hopefully its just temporarySorry for the inconvienience, yes I'm actively working on this issue and hope to resolve this as soon as possible.

Keith A
03-11-2017, 06:32 AM
Can someone that is having the problem of not being able to view the threads try a different web-browser and let me know if this makes any difference.

guido
03-11-2017, 06:57 AM
Keith,

For me it is my companies firewall that doesn't like the contents of threads. I can see the thread categories and the thread headers after choosing new posts. But I click on a header and it is blocked. Same version of firefox in working (home) and non-working (behind firewall) cases. I tried chrome from home and that works fine...

guido

superbowlpats
03-11-2017, 07:05 AM
Can someone that is having the problem of not being able to view the threads try a different web-browser and let me know if this makes any difference.

I tried it with Chrome and Firefox and same results:crap:

Keith A
03-11-2017, 10:04 AM
Thanks for the input. I'll get this solved...hopefully soon.

bobswire
03-11-2017, 03:18 PM
On my personal computer (iMac OSX Yosemite 10.10.5) using Chrome or Safari I haven't experienced any problems or noticed any changes.

redir
03-11-2017, 05:28 PM
IT is actually an update to Firefox. It's part of an industry wide move to move from HTTP to more secure HTTPS.

Keith A
03-13-2017, 03:20 PM
Just wanted to let everyone know that I am working on this issue. I don't have this solved yet, but am investigating what options are available and how to move forward to comply with the push to go to a secure website (https).

superbowlpats
03-14-2017, 05:36 AM
Snow day today so i can access Paceline on my home computer :banana:

guido
03-21-2017, 02:57 PM
Any updates on this? I'm still getting blocked by my work computer's firewall...

Keith A
03-21-2017, 03:33 PM
Any updates on this? I'm still getting blocked by my work computer's firewall...I apologize for this taking a while. This was something I am totally unfamiliar with and have been trying to educate myself on the SSL Certificates. These range in cost from free to over $1K per year. I thought I had a lead on some help here, but that hasn't panned out. I hope to have this resolved some time soon.

cmg
03-22-2017, 09:57 PM
what does Roadbikereview forum use? no problem using their site.

superbowlpats
03-23-2017, 03:19 AM
No problems with Slowtwitch either.

cmg
04-03-2017, 11:13 PM
what's the latest? still can't read the threads.

Keith A
04-04-2017, 08:02 AM
what's the latest? still can't read the threads.I apologize for not resolving this issue yet, I've been working some crazy hours lately finishing up the next version of the software that our company produces.

I will take care of this soon!

Keith A
04-07-2017, 10:46 AM
Just keeping everyone up-to-date on this issue, I have the SSL Certificate installed which can be seen here...
https://www.sslshopper.com/ssl-checker.html?hostname=http%3A%2F%2Fwww.thepaceline .net%2F

I just need to finish up connecting vBulletin to use this and hopefully all of our problems will be resolved. There's a chance I may break things during this process, but will give you a heads-up before I make any changes.

Keith A
04-24-2017, 05:32 PM
The site should be now secure...depending how you access the forum. You should be able to reach this via http or https for now, but I'm working on making this only available via https.

I was hoping that anyone that was having issues accessing this site could let me know if this works for them if you go through https://forums.thepaceline.net.

Thanks.
-Keith