Not secure message in browser - Escape Trailer Owners Community

Go Back   Escape Trailer Owners Community > Escape Community > Forum Help | Announcements | Suggestion Box
Click Here to Login

Reply
 
Thread Tools Display Modes
 
Old 04-10-2019, 04:48 PM   #1
Site Team
 
cpaharley2008's Avatar
 
Join Date: Jun 2010
Location: Chilliwack, British Columbia
Trailer: Escape#4, 2019 Escape21 DejaView pulled by 2014 Ram Hemi/8sp
Posts: 18,058
Not secure message in browser

anyone else getting the not secure message/?
__________________

__________________
Jim
Never in doubt, often wrong.....
cpaharley2008 is online now   Reply With Quote
Old 04-10-2019, 05:03 PM   #2
Site Team
 
Janet H's Avatar
 
Join Date: Sep 2012
Location: Pacific NW, Washington
Trailer: 1964 Globetrotter
Posts: 607
The login pages here are secure (httpS) but as noted, the rest of the site is not. We store no financial info or other sensitive content here and we long ago changed login pages (where password data is passed) to meet current security standards.

The primary reason for not changing the rest of the site is that we have thousands of links in posts to offsite images and content that are not https. ALL those links would break. As the www updates it will be easier to make this change but for now we would rather retain that content then break it.

Last year google began to push websites to use https instead of http as a security update. A few months ago they began to actually began to display that little red triangle;"not secure" on browser address lines.

We hand coded an update to make the LOGIN page https. This is the page where user credentials are passed and the only sensitive data we store. Once a member has logged in the site reverts to http (and the alert begins to display in browsers). Using https on all pages actually breaks some things the forum. Offsite links and hosted images no longer work, ads don't display, photos, etc.

So... as you login the page is secure (https) but once you have logged in the regular site is http. Since no login/pass info is being sent on these pages we believe this is safe and reasonable. There's little we can do to change this until we move to a new forum software platform which eventually we will have to do.

You can read more about the google alerts here: https://www.wired.com/story/google-c...-secure-label/
__________________

__________________
.
You have brains in your head. You have feet in your shoes.
You can steer yourself any direction you choose | Dr. Seuss


Escape Forum Custom Google Search
Janet H is offline   Reply With Quote
Old 04-10-2019, 05:17 PM   #3
Senior Member
 
gbaglo's Avatar
 
Join Date: Oct 2008
Location: North Vancouver, British Columbia
Trailer: 2009 Escape 17B - "Toad". '08 Toyota RAV4 V6
Posts: 12,993
I sent an alert to "Contact" site team about an issue I had sending a message to another member. Problem is, one cannot attach a photo. So, here is a screen grab.

Is my issue to do with new log-in?
Attached Images
File Type: jpg Screen Shot 2019-04-09 at 6.42.02 PM.jpg (58.1 KB, 28 views)
__________________
2009 Escape 17B "Toad"
2008 Toyota RAV4 V6 Sport
North Vancouver, British Columbia

What happens to the hole when the cheese is gone?
- Bertolt Brecht
gbaglo is offline   Reply With Quote
Old 04-10-2019, 05:26 PM   #4
Site Team
 
Janet H's Avatar
 
Join Date: Sep 2012
Location: Pacific NW, Washington
Trailer: 1964 Globetrotter
Posts: 607
You might try clearing your browser cache or alternatively try this link: http://www.escapeforum.org/forums/pr...do=newpm&u=991
__________________
.
You have brains in your head. You have feet in your shoes.
You can steer yourself any direction you choose | Dr. Seuss


Escape Forum Custom Google Search
Janet H is offline   Reply With Quote
Old 04-10-2019, 05:59 PM   #5
Senior Member
 
gbaglo's Avatar
 
Join Date: Oct 2008
Location: North Vancouver, British Columbia
Trailer: 2009 Escape 17B - "Toad". '08 Toyota RAV4 V6
Posts: 12,993
I cleared the cache a couple days previous to attempting to send email.
After sending the email and getting the URL message, I sent by PM.
Haven't had a response yet ( don't know if it's a technical or personal reason ).
__________________
2009 Escape 17B "Toad"
2008 Toyota RAV4 V6 Sport
North Vancouver, British Columbia

What happens to the hole when the cheese is gone?
- Bertolt Brecht
gbaglo is offline   Reply With Quote
Old 04-10-2019, 06:10 PM   #6
Site Team
 
cpaharley2008's Avatar
 
Join Date: Jun 2010
Location: Chilliwack, British Columbia
Trailer: Escape#4, 2019 Escape21 DejaView pulled by 2014 Ram Hemi/8sp
Posts: 18,058
My concern is non members can now follow member's travel plans for various reasons, some of which are not good.
__________________
Jim
Never in doubt, often wrong.....
cpaharley2008 is online now   Reply With Quote
Old 04-10-2019, 06:12 PM   #7
Senior Member
 
gbaglo's Avatar
 
Join Date: Oct 2008
Location: North Vancouver, British Columbia
Trailer: 2009 Escape 17B - "Toad". '08 Toyota RAV4 V6
Posts: 12,993
Quote:
Originally Posted by cpaharley2008 View Post
My concern is non members can now follow member's travel plans for various reasons, some of which are not good.

Don't they have to publicly post their plans for somebody to read them?
__________________
2009 Escape 17B "Toad"
2008 Toyota RAV4 V6 Sport
North Vancouver, British Columbia

What happens to the hole when the cheese is gone?
- Bertolt Brecht
gbaglo is offline   Reply With Quote
Old 04-10-2019, 06:41 PM   #8
Senior Member
 
Join Date: Dec 2012
Location: Edmonton, Alberta
Trailer: 1979 Boler B1700
Posts: 11,326
Quote:
Originally Posted by cpaharley2008 View Post
My concern is non members can now follow member's travel plans for various reasons, some of which are not good.
"Now"? This has not changed. EscapeForum.org has never been encrypted, and even the login page was unencrypted until recently (so anyone "sniffing" your network traffic would see your password and could then login as you). The only change has been in the security standards of browsers, which now identify as "Not secure" sites which were previously not flagged as being anything of concern.

Quote:
Originally Posted by gbaglo View Post
Don't they have to publicly post their plans for somebody to read them?
Yes.
Even if the forum were properly encrypted, as long as content can be read without logging in (as is the case for most forums) anything that anyone posts is completely public. So no, you really shouldn't post both your home address or actual identification and the fact the you are currently on a trip; prudent internet use practice would be to post a trip report when you get back. Each forum member can decide if that is a concern to them.
Brian B-P is offline   Reply With Quote
Old 04-11-2019, 06:21 PM   #9
Site Team
 
cpaharley2008's Avatar
 
Join Date: Jun 2010
Location: Chilliwack, British Columbia
Trailer: Escape#4, 2019 Escape21 DejaView pulled by 2014 Ram Hemi/8sp
Posts: 18,058
I always thought that the forum was a closed group, similar to those on Facebook, where only members can see posts and respond. Thus phishing would be minimal as well as any new member has to apply for joining.
__________________
Jim
Never in doubt, often wrong.....
cpaharley2008 is online now   Reply With Quote
Old 04-11-2019, 07:07 PM   #10
Site Team
 
Donna D.'s Avatar
 
Join Date: Nov 2008
Location: Portland, Oregon
Trailer: 2014 Escape 5.0 TA
Posts: 8,126
Quote:
Originally Posted by cpaharley2008 View Post
I always thought that the forum was a closed group, similar to those on Facebook, where only members can see posts and respond. Thus phishing would be minimal as well as any new member has to apply for joining.
Kinda. I use a browser (where I'm not logged in) to test what others may see when they're not logged in either. Guests can view posts, not photos however and of course can't post. PLUS the forums are filled with nagging advertisements when not logged in. A lot of the functionality is disabled to guests, but not all.
__________________

__________________
Donna D.
Ten Forward
2014 Escape 5.0TA
Donna D. is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off






» Featured Campgrounds

Reviews provided by

Disclaimer:

This website is not affiliated with or endorsed by Escape Trailer Industries or any of its affiliates. This is an independent, unofficial site.



All times are GMT -5. The time now is 06:42 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2019, vBulletin Solutions, Inc.
Copyright 2012 Social Knowledge, LLC All Rights Reserved.