• Women skiers, this is the place for you -- an online community without the male-orientation you'll find in conventional ski magazines and internet ski forums. At TheSkiDiva.com, you can connect with other women to talk about skiing in a way that you can relate to, about things that you find of interest. Be sure to join our community to participate (women only, please!). Registration is fast and simple. Just be sure to add [email protected] to your address book so your registration activation emails won't be routed as spam. And please give careful consideration to your user name -- it will not be changed once your registration is confirmed.

Forum page not secure

Jenny

Angel Diva
Did something change - I noticed that the forum page is no longer secure, but the blog and home page still are.
 

ski diva

Administrator
Staff member
What did you notice? Nothing's changed. As far as I know it is. Let me check with my host company and see what they say.
 

gingerjess

Angel Diva
I'll need to take a closer look to be sure, but if you're using Chrome, this is likely just a change to the way Chrome shows the security of a webpage. They've been ratcheting things down for a while (which is a good thing IMO!) but it means that as their idea of what "secure" is changes, pages that haven't changed at all can get new alerts. I'll take a peek and see if I can help figure it over my morning coffee.
 

ski diva

Administrator
Staff member
I really don't think it's an issue, either. I have an SSL certificate, and my url is https, not http. I can double check with my server, but I think it's fine.
 

Jenny

Angel Diva
On my desktop, in Chrome, this is how the address bar looks:

1598634659533.png

The home page has the lock next to the website name.

On my tablet, in Safari, the home page again has a lock next to the website name, but the forum page has nothing.
 

gingerjess

Angel Diva
@Jenny, thanks for that screenshot!

I did some digging, and Chrome did change some handling in a release that looks to have come out last night, but the site is still just as secure as it was yesterday. I sent @ski diva some pointers on how to get Chrome's "not secure" indicator to go away, but there's nothing I see that's leaking private information.

Alertness to things like this is, of course, really important, and as someone who works on information security, I'm really glad that so many people noticed this and didn't ignore it. While there's no big issue here, in other cases, seeing a site change from "secure" to "not secure" could imply a serious issue, and getting in contact with the people who run the site is the right way to handle it.
 

elemmac

Angel Diva
I was curious (and went full blown nerd-mode during my lunch break to look it up). I have three different browsers on my computer (plus Safari on my phone). Everything came up as "https". However, Chrome has a "second check" that listed the site as "Not Secure", as @Jenny points out ^.

With a few Googles...I came up with a [probable] reason. Chrome labels all "mixed content" sites as Not Secure. This is shown when you right click on the background of a website; hit "inspect" or "inspect element"; click on the "Console" tab...and it will display the errors/warnings of mixed content. It appears that the logo on the forum page is causing the "Not Secure" tag on Chrome.

Source to find and fix mixed content...https://www.thesslstore.com/blog/how-to-find-and-fix-mixed-content-warnings-on-https-sites/
 

Latest posts

Members online

Forum statistics

Threads
26,281
Messages
499,027
Members
8,563
Latest member
LaurieAnna
Top