PY Online Forums - Bringing the Pontiac Hobby Together

PY Online Forums - Bringing the Pontiac Hobby Together (https://forums.maxperformanceinc.com/forums/index.php)
-   THE LOBBY (https://forums.maxperformanceinc.com/forums/forumdisplay.php?f=467)
-   -   Security on the site (https://forums.maxperformanceinc.com/forums/showthread.php?t=808854)

lethal-428-lemans 08-20-2017 02:24 PM

Security on the site
 
I went to get on the site today and it said my connection to site is not secure. Has anyone else had this show up ?

Half-Inch Stud 08-20-2017 02:26 PM

no. not yet.

64-3Deuces 08-20-2017 02:39 PM

Not on this site, but happened on a few other sites including msn.com. Kind of rare and only happened when I first clicked on-hit the refresh and it was OK. I think it was an initial server connection error.

oldblueponcho 08-20-2017 02:57 PM

I've actually had that show up here and a few other sites for a while now. I thought maybe it was just my Bit defender up to some new tricks. Thanks for the info.

lethal-428-lemans 08-20-2017 03:26 PM

Mine still has the security warning at the top if my phone next to the web site name

64-3Deuces 08-20-2017 05:31 PM

Just checked, no security warnings for this site on either my desktop or my phone. Maybe something with the security settings on your phone........

lethal-428-lemans 08-20-2017 08:19 PM

I'll have to check . my girlfriend went to the site and got the same notice.

salem1912 08-20-2017 09:57 PM

Mine say's Not secure,been like that for a month or two. It was talked about on this forum then also.

fyrffytr1 08-20-2017 10:26 PM

I use Mozilla Firefox and get the "Not secure" notice on several sites. So far I haven't had any problems.

64-3Deuces 08-20-2017 11:04 PM

I stand corrected :doh: Just noticed the slash/lock icon on Firefox--Connection not secure, Logins entered on this page could be compromised. Goes away once logged in. I believe that Firefox is saying the this websites protocol for password security is not that strong. Hopefully a computer/programmer expert will clarify. Still no warnings on my phone, which uses the Chrome browser.

East 08-21-2017 10:00 AM

https:// vs http
 
SSL port 443 encrypted

https://www.wellsfargo.com

https://www.google.com

etc...

GT182 08-21-2017 05:20 PM

Just happened to me on MSN about 20 minutes ago. I closed out the MSN page and reopened it. It didn't reshow. Acted about the same way that I got a real nasty Trojan on my computer this past Spring. Took the MS store here about a week to get rid of it. I don't trust stuff like that appearing and I get out or shut down as fast as I can.

ftwmlp 08-21-2017 05:33 PM

As was mentioned in a previous post, this was the subject of a previous thread shortly after the website upgrade. It appears this site is not using the SSL protocol and most (if not all) browsers should consider it "not secure". I honestly do not remember if we resolved to an http or https address before the upgrade, but the current state of this connection is troubling.

tripower 08-21-2017 07:12 PM

The core issue is that this forum (a web site) or hosting party allowed their SSL Certificate (RSA 2048bit cert) to expire on 3/28/17. Either the Certificate lapsed or is not linked to the new site.

Most Internet browsers see this as a security lapse and indicate as such when you go to the site. Also, most browsers will also get angry if you attempt a HTTPS (SSL) or HTTP connection to a site with no valid Certificate. So SSL login is disabled on this site for login and thus the notification from your browser of the sites security.

So essentially since this site is using pure text HTTP at login, your username & password are easier to "sniff". I wouldn't use this site for banking but for talking Pontiac's it's just fine. Would not suggest using the same login/password you use here for other sites where your personal info is high priority.

Also, the certificate and SSL message are only related to this forum. The Ames Performance site (secure.AmesPerf.com) where you order and pay for parts IS totally secure and uses valid SSL certificate.

fiedlerh 08-26-2017 12:24 AM

Yes it is a hassle logging in every time I visit. SSL certs are pretty cheap. I could change my link, but instead I just don't visit as often since the site is not secure.
Eric, please fix it. If you need help, let me know.

cuz68 08-27-2017 10:39 PM

I liked not having to log all my info in.

Flodywhite 10-19-2022 11:03 AM

It happened on a couple other websites, including msn.com, but not on this one. Rare and only occurred when I first clicked on-hit the refresh button and everything was OK after that. I believe the issue was a bad server connection at first.

b-man 10-19-2022 11:11 AM

Quote:

Originally Posted by Flodywhite (Post 6380868)
It happened on a couple other websites, including msn.com, but not on this one. Rare and only occurred when I first clicked on-hit the refresh button and everything was OK after that. I believe the issue was a bad server connection at first.

Interesting first post for having just joined the forums today.

Bringing a 5 year old thread back from the dead.

Banned.

mzbk2l 10-19-2022 01:32 PM

His spam link was hidden in the comma after the word "button." Good catch! :)

turbo69bird 10-19-2022 02:15 PM

Nice job. b man! Good catch.


All times are GMT -4. The time now is 05:55 PM.