www.northwalesbirding.co.uk
http://northwalesbirding.co.uk/forum/

Log in not secure
http://northwalesbirding.co.uk/forum/viewtopic.php?f=2&t=8248
Page 1 of 1

Author:  KerryN [ Wed Mar 08, 2017 9:41 pm ]
Post subject:  Log in not secure

I have started receiving a message that says that log ins to this site are not secure and that my computer could be compromised. Is anyone else having this message appear?

Author:  wally [ Wed Mar 08, 2017 10:21 pm ]
Post subject:  Re: Log in not secure

I would guess it depends on your browser and security software. I don't, but would ignore it anyway, as I understand why.
The site only uses HTTP, which is NOT secure, so any information you send, email address, password etc is sent over clear text. An appropriately placed hacker (which would probably mean either on your network, or the server network) could obtain this information. However, the forum is no less secure than any other site running HTTP. To make the site secure, we would need to purchase an SSL certificate, which are hundreds of pounds a year (although there are free alternatives we could look into using). As best practice, make sure your password for this forum is not the same as any passwords for any other sites.

Author:  KerryN [ Wed Mar 08, 2017 10:32 pm ]
Post subject:  Re: Log in not secure

wally wrote:
I would guess it depends on your browser and security software. I don't, but would ignore it anyway, as I understand why.
The site only uses HTTP, which is NOT secure, so any information you send, email address, password etc is sent over clear text. An appropriately placed hacker (which would probably mean either on your network, or the server network) could obtain this information. However, the forum is no less secure than any other site running HTTP. To make the site secure, we would need to purchase an SSL certificate, which are hundreds of pounds a year (although there are free alternatives we could look into using). As best practice, make sure your password for this forum is not the same as any passwords for any other sites.


Oh, right. I hadn't realised that. Thanks for the info.

Author:  Greenspinnaker [ Fri Mar 10, 2017 8:20 pm ]
Post subject:  Re: Log in not secure

Glad to say I'm not getting that message.
Margery

Page 1 of 1 All times are UTC
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/