Jump to content
Gibson Brands Forums
Sign in to follow this  
buddyw

site unscured

Recommended Posts

I keep getting a computer warning that this site is unsecured, I just wonder if I have and over reacting virus protection or do others get that also.

Share this post


Link to post
Share on other sites

This happens because the site uses the older "http" web protocol that is not "secure". The web is moving to "https" and new versions of the popular web browsers are now starting to warn you of every site that still uses the old protocol.

 

This certainly does not mean there are viruses here though! The old protocol transmits information as plain text over the internet, which makes it easier for a bad guy to see everything that passes between your computer and the forum servers. The new protocol encrypts everything, so a bad guy cannot just read what you are sending/receiving.

 

Should you care? I wouldn't worry a lot about this just yet, but you are going to continue getting warnings from sites that use the old protocol. Many of the older forum websites have been reluctant to move to the new protocol, and some web hosting companies will charge more to use it. I think there are only two areas of possible concern on a site like this. One would be that someone might intercept your private messages. More of a problem would be that someone might harvest user names and passwords more easily from an insecure website.

 

IMO, the main takeaway should be DO NOT USE THE SAME PASSWORD HERE THAT YOU USE ON OTHER SITES. Probably not a big deal if someone hacks your Gibson Forum account. But if you use the same password, they (theoreticlaly) might be able to hack your credit card or bank accounts. [scared]

Share this post


Link to post
Share on other sites

http sites will not encrypt traffic, so usernames / passwords are transmitted in clear text

 

https will encrypt so it makes a hackers life a bit more difficult, but the overhead is ssl certificates that need to be purchased and updated yearly by the site admins.

 

since there's no sort of "transactions" here, (like purchase information, for example) the folks administering this site don't feel the need.

 

Most of these forums are setup the same way.

Share this post


Link to post
Share on other sites

http sites will not encrypt traffic, so usernames / passwords are transmitted in clear text

 

https will encrypt so it makes a hackers life a bit more difficult, but the overhead is ssl certificates that need to be purchased and updated yearly by the site admins.

 

since there's no sort of "transactions" here, (like purchase information, for example) the folks administering this site don't feel the need.

 

Most of these forums are setup the same way.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...