Traveller Store CotI Features New Posts Mark Forums Read Register


Go Back TravellerRPG.com > Citizens of the Imperium > Administration > CotI Website Issues

CotI Website Issues This is the place to let us know if you are having any problems or questions with the features available on the CotI website.

Reply
 
Thread Tools Display Modes
  #1  
Old June 22nd, 2020, 12:06 AM
Blue Ghost's Avatar
Blue Ghost Blue Ghost is offline
Knight
 
Join Date: May 2001
Location: Foster City, CA
Posts: 8,018
Gallery : 0
Visit Blue Ghost's Blog
Blue Ghost has disabled reputation
Default New MS Edge says forum is not secure

I installed the new version of MS Edge from Microsoft, and I get a little red exclamation point next to a "Not secure" warning in the address bar.

Has this always been the case? Or should I not worry about it?
__________________
Sir Ghost, Knight of Imperial occupied Terra, Sol.
Travels with Blue Ghost; musings of a knight of the Imperium.
Reply With Quote
  #2  
Old June 22nd, 2020, 03:45 AM
AnotherDilbert AnotherDilbert is online now
Citizen: SOC-14
 
Join Date: May 2008
Location: Stockholm 🇸🇪
Posts: 2,154
Gallery : 0
AnotherDilbert Citizen+AnotherDilbert Citizen+AnotherDilbert Citizen+
Default

Presumably because the SSL certificate, needed for the encrypted https protocol, is not valid for "www.travellerrpg.com", only for "mail.travellerrpg.com, travellerrpg.com".

Try accessing "travellerrpg.com" instead:
https://travellerrpg.com/CotI/Discuss/
Reply With Quote
  #3  
Old June 22nd, 2020, 08:00 AM
Blue Ghost's Avatar
Blue Ghost Blue Ghost is offline
Knight
 
Join Date: May 2001
Location: Foster City, CA
Posts: 8,018
Gallery : 0
Visit Blue Ghost's Blog
Blue Ghost has disabled reputation
Default

Hmm, it still said not secure, but the red warning thing didn't show up until I started typing this post. Strange. I don't know how important it's not like it's accessing my personal data or anything. Very odd.
__________________
Sir Ghost, Knight of Imperial occupied Terra, Sol.
Travels with Blue Ghost; musings of a knight of the Imperium.
Reply With Quote
  #4  
Old June 22nd, 2020, 09:07 AM
AnotherDilbert AnotherDilbert is online now
Citizen: SOC-14
 
Join Date: May 2008
Location: Stockholm 🇸🇪
Posts: 2,154
Gallery : 0
AnotherDilbert Citizen+AnotherDilbert Citizen+AnotherDilbert Citizen+
Default

It's just a bit of harassment to force websites to configure https properly.

I believe the drift is towards https by default, but many sites are not ready for that yet. Hence the pressure to get it sorted, before the major browsers switch to https by default, or https only.

http (without -s) is inherently unsafe, anyone with access to the traffic can read and modify it, and use your login session for nefarious purposes, so https by default is a good thing.
Reply With Quote
  #5  
Old June 22nd, 2020, 09:22 AM
Blue Ghost's Avatar
Blue Ghost Blue Ghost is offline
Knight
 
Join Date: May 2001
Location: Foster City, CA
Posts: 8,018
Gallery : 0
Visit Blue Ghost's Blog
Blue Ghost has disabled reputation
Default

Ah, interesting. Thank you for that.

I guess it'll keep out Virus for a while
__________________
Sir Ghost, Knight of Imperial occupied Terra, Sol.
Travels with Blue Ghost; musings of a knight of the Imperium.
Reply With Quote
  #6  
Old June 22nd, 2020, 12:56 PM
whartung whartung is offline
Citizen: SOC-14
 
Join Date: Nov 2004
Posts: 2,584
Gallery : 0
whartung Citizen+whartung Citizen+whartung Citizen+
Default

Make no mistake, travellerrpg.com IS unsafe. Safari says it's "not secure" as well.

If you click on that little login form with the username/password, it's sent out via HTTP for all the world to see your login credentials.

So, you know, FYI.
Reply With Quote
  #7  
Old July 20th, 2020, 04:23 AM
BRover's Avatar
BRover BRover is offline
Citizen: SOC-12
 
Join Date: Jan 2020
Posts: 224
Gallery : 0
BRover Citizen
Default

Firefox also notes the login is insecure.
__________________
There are three types of Travellers with Math-3+: those who can count, and those who cannot.

Our Traveller Universes clearly are at variance. Blessed be the variance!
Reply With Quote
  #8  
Old July 21st, 2020, 11:48 AM
coliver988's Avatar
coliver988 coliver988 is offline
Baron
 
Join Date: Dec 2003
Location: Asheville
Posts: 1,589
Gallery : 103
Visit coliver988's Blog
coliver988 Citizen+coliver988 Citizen+coliver988 Citizen+
Default

Quote:
Originally Posted by whartung View Post
Make no mistake, travellerrpg.com IS unsafe. Safari says it's "not secure" as well.

If you click on that little login form with the username/password, it's sent out via HTTP for all the world to see your login credentials.

So, you know, FYI.
which is why you should never re-use login credentials. Not encrypted is not great but it was all we had for a long time in the webs. But as I have here are posts and stuff, the "not safe" is really more of an Amber Travel Zone than a Red Travel Zone.
__________________
Mostly lurking about...CT is still my favorite with T5 as a neat tool box to plunder.


Duke of The Solomani RimLANGELOS A4249A6-FLangelos Write Up AlphaTrane / Glisten 2038
Baron, IpkurIpkur C564543-9Ipkur Write Up AlphaRomar / Glisten 2140
Knight of the Third Imperium [x2]Rhylanor A434934-FCyan / Trojan Reach 2102
Knight of the Third ImperiumIkuna E000410-AKryslion / Trojan Reach 2002
MCG For Conspicuous GallantryThe Assault On AlellSelshor / Trojan Reach 1402
Travellers Aid Society 2798Dudid B510526-9Blog - mix of OTU and MTUhttp://traveller-ct.blogspot.com/
Pilots Guide To D'Arlee QuadrantTraveller Github spacehttps://github.com/COliver988/Traveller
Reply With Quote
  #9  
Old July 21st, 2020, 10:53 PM
timerover51's Avatar
timerover51 timerover51 is offline
Citizen: SOC-14
 
Join Date: Sep 2012
Location: North of Chicago
Posts: 6,469
Gallery : 4
Visit timerover51's Blog
timerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizentimerover51 Beloved Citizen
Default

Safari and FireFox are telling me that a lot of the websites, like Project Gutenberg among others, are not secure. I figure that it is a risk of being online, and I have no idea as to how much is due to changes in the security software in the browsers getting way ahead of the websites.
__________________
Star Port Administrator: El Paso, El Paso, Sword Sub-sector, Piper-Norton Out Rim Sector
Link to Piper Sector: http://www.zarthani.net/ridder-mankind_to_the_stars.htm
Do you have a security clearance? New Oct. 24 Blog Entry-Birthday
http://www.youtube.com/watch?v=ElI451TxsTg, 3:24 in.
I march to my own set of bagpipes. Caution: This individual thinks that studying logistics is FUN.

They that go down to the sea in ships,
that do business in great waters;
These see the works of the LORD,
and his wonders in the deep.
Reply With Quote
  #10  
Old July 22nd, 2020, 07:12 AM
tjoneslo tjoneslo is offline
Citizen: SOC-14
 
Join Date: Feb 2001
Location: Ferrisburgh, VT, USA
Posts: 2,892
Gallery : 2
Visit tjoneslo's Blog
tjoneslo Citizen+tjoneslo Citizen+tjoneslo Citizen+
Default

There are two sources to this "not secure" warning.

The first is the "https" (secure http) everywhere initiative being driven by Mozilla (firefox) and Google (chrome). The idea is to achieve exactly what is being done here. The browsers complain to the users that their favorite site using "http" is "insecure", the users complain to the website owners, and the owners then fix the site to use https.

The second is certificate use to secure the "https" is out of date or not issued by a trusted issuer. There is a similar idea here about the feedback loop. There are a few free certificate issuers, but most cost $100+ per year to keep up-to-date, assuming your ISP allows the process to be automated.

CotI is of the first type, it still uses "http". This requires server side configuration to fix.

Sooner or later Firefox and/or chrome will start to refuse to connect to these http site.
__________________
Archduke of the Solomani Rim - Terra (Solomani Rim 1827)
Duke Akumid - Akumid (Vland 1628)
Marquis Yeremyh - Yeremyh (Solomani Rim 1804)
Marquis Hysyl - Hysyl (Deneb 2425)
Baron Regina - Regina (Spinward Marches 1910)
TAS member - Vipan (Empty Quarter 1038)
Be part of the history of Traveller:

https://wiki.travellerrpg.com/Main_Page
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Not Secure atpollard Citizens' Information Centre 11 December 15th, 2019 10:49 AM
Secure communications? SpaceBadger The Lone Star 7 January 8th, 2014 12:34 PM
Secure Facility Request Icosahedron The Lone Star 3 September 21st, 2009 03:46 PM
Secure Server Ordering Up and Running! hunter Citizens' Information Centre 0 February 24th, 2008 04:24 PM
Secure Credit Card Ordering Back Up hunter Citizens' Information Centre 0 August 8th, 2007 01:41 AM

This website and its contents are copyright ©2010- Far Future Enterprises. All rights reserved. Traveller is a registered trademark of Far Future Enterprises .
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
Copyright (c) 2010-2013, Far Future Enterprises. All Rights Reserved.