Not Secure

[buckland]

Just wondering why WTW IP is not a secure site?
I have latest version of Safari which has stated that they have started showing sites that aren't secure.

 

[Wandering Sagebrush]

That’s a question that Janet or one of the programmers will need to answer. I get the same msg.

 

[buckland]

Always on the look out for things to avoid. That’s why I went with a VPN.
Thanks

 

[Stan@FourWheel]

We changed over this year on the FWC website.

Went from http to https

The reason we did it was for Google Analytics & their reporting.

Without the secure https, Google wasn't reporting data back to us correctly.

 

[takesiteasy]

I had asked about back in 2017 (post #12) in this thread:
http://www.wanderthewest.com/forum/topic/14161-log-on-problems/page-2

Never heard back.

 

[smlobx]

I’m getting the same message..

 

[ski3pin]

I passed the question on to the admins for WTW and received this reply -


The reason is a little convoluted but here goes:
Last year google began to push websites to use https instead of http as a security update. A few months ago they began to actually began to display that little red triangle;"not secure" on browser address lines.

There's little we can do to change this until we move to a new forum software platform which eventually we will have to do.

 

[JaSAn]

What on this site necessitates it being 'secure'?

 

[buckland]

That's what I thought ... so no big deal for now (I use VPN anyway)
Thanks for the investigation and report back.
The world is definitely getting more complex.

 

[BillTheHiker]

That's what I thought ... so no big deal for now (I use VPN anyway)
Thanks for the investigation and report back.
The world is definitely getting more complex.

Http sends everthing over the internet in plain text.

If you login, a hacker can easily grab your credentials and use them to post nefarious stuff under your name.

Even if you do not login, a hacker can redirect you to their IP address and download malware to your computer before you even have chance to exit or close your browser.

https encrypts everything making it much much harder to get your credentials, not that a determined hacker could not do it given unlimited time and resources. A redirect would be detected if the hacker does not have an SSL certificate which they most certainly would not.

And I would not be feel too secure using a VPN -read this for example:
https://yro.slashdot.org/story/19/03/02/0236251/how-can-you-decide-which-vpn-to-trust

No idea why WTW has not switched to https. https does require the server hosting the site have an SSL certificate and maybe that is the problem.

 

[buckland]

One gets what one pays for. I know my VPN is top notch. It’s on my iPad, iPhone and MacBook.

 

[ski3pin]

No idea why WTW has not switched to https. https does require the server hosting the site have an SSL certificate and maybe that is the problem.

Speculation on my part - The founder of WTW set up the forum in this format, for whatever reason. The new website owners found that the software is not very user friendly. It would be difficult to move existing content to a new format that would allow https. That's what I read between the lines in -

"There's little we can do to change this until we move to a new forum software platform which eventually we will have to do."