Forum glitches while we enable https

I am using macOS Sierra (version 10.12.1).

Cleared cache in Firefox. I can log into GF website, but not forum (I get a blank screen when I click on the forum link).

Cleared cache in Chrome. I can log into GF website, but not forum (I get a blank screen when I click on the forum link here too).

Logged in using Safari. No problems. The page loaded perfectly.

I tried restarting my computer after clearing caches. That did not help with either Firefox or Chrome.

Thanks.

Heck, for months, Iā€™ve had issues with not being able to load the forum at all some nights, no matter what voodoo I try. Ironically, on those nights I have no issues with streaming video from any of the major sources, go figure.

No issue tonight, Mac OS 10.11.6 / Safari

Iā€™m having some issues with Chrome on Android 6.0.1, but everything ok with the default Samsung browser.

1 Like

Iā€™m getting a white screen of death in chrome, Godzilla, and all mobile brozers. I never thought Iā€™d say this, but, thank goodness for internet explorer.

3 Likes

Unable to get into the forum on my desktop (with Chrome) -cleared out cache and deleted history - lost all my stored passwords and still no forum. Only in Explorer and my laptop nowā€¦:angry:

Incidentally, why does a public forum need to be encrypted?

because it makes your internet connection more like a letter and less like a postcard. every website should be doing https.

3 Likes

But when anybody can see everything written in these forums, what difference does it make that a man in the middle canā€™t see them by intercepting the web traffic?

I had to force a reload of the forum this morning, but all is working find now. Windows 10 and Chrome (at work).

well in part because not all parts of the forum are public. thereā€™s a beta area, as i understand it, there are direct messaging features, etc. i mean itā€™s just good policy, but there is an actual potential need, too.

1 Like

More than anything, itā€™s the current industry standard for all websites to use https. This does not mean all website must use secure connects as the non-secure http still works, but https as a standard helps to insure there are no unexpected data breachs. Youā€™re correct there is nothing on this site that really needs to be secure, but using https does not hurt anything, other that the potential for slightly slower response times due to the overhead of the security. Thatā€™s a small price to pay for the added security.

In general, I know when Iā€™m on a highly reputable site because they implemented https even when itā€™s not required just to ensure there are no security problems over the wire. Itā€™s just one of many indication the company / organization is security conscious.

6 Likes

Your email and password is used to sign in. Same as the one needed to cancel your order.

3 Likes

Mostly because your account login is set in the clear (people could see your username and password), when you login/connect.

Also, as the push to get SSL everywhere continues, people are going to experience the web browsers less cooperative on user logins (on websites not SSL). Chrome has announced that the current Chrome Beta version (destined to be version 56) will be very clear post any password or credit card fields that are not on an SSL webpage.

It will probably reach a point in the near future that browsers (and other internet software apps) will make the user jump through additional steps access accounts (username and passwords) and credit card fields if the site is not encrypted. (I am not real thrilled that browsers are forcing changes instead of people changing themselves).

Biggest push is because people use the same username and password across many different websites and the bad guys know it . Just look to Yahoo finally admitting 1 Billion accounts compromised in 2013 and 500 Million compromised in 2014. Guarantee that many of those accounts use the same username and password at Yahoo as they use on Amazon, their credit cards, banks and medical sites.

9 Likes

FYI, 0 issues last night through this morning using Chrome on either Android and Win10.

Seems like a sledge hammer to crack a nut. I recently upgraded to high speed broadband only to find I am waiting for ā€œestablishing secure connectionā€ every time I open a new web page.

1 Like

In general, youā€™re right.

Just like 80 years ago no body thought about locking their car, we all take that for granted today that when we get out of our car we lock it and have to unlock it when we return. Itā€™s additional overhead, but itā€™s just the way to secure web connections and itā€™s the way of the future on the web.

I fully understand your point and hope you donā€™t think there are several of us ganging up on you as your point of view is completely valid. Thanks for questioning the change.

3 Likes

Itā€™s really not. Adding a cert to your site takes minimal effort to deploy and maintain. Almost every site you go to is secured. From Google.com to YouTube.com to your bankā€™s website. Itā€™s not like this is something new. Everybody does it and it really doesnā€™t affect anything (aside from making web browsing a little more secure).

  • Tom
3 Likes

Interesting. Not a network guy so know just enough to keep myself out of trouble. Never once have I had the ā€œestablishing secure connectionā€ notification. Have a secure HTTPS connection through Chrome. Wonder if someone more knowledgeable understands or can help you find what settings might help. For all I know you are a network/security engineer.

1 Like

Let me start by saying Iā€™m a Network Engineer with over 20 years experience. :slight_smile:

Itā€™s pretty rare, but Iā€™ve seen this behavior before. Itā€™s a Chrome-specific message. But ultimately, itā€™s not Chromeā€™s fault. Itā€™s always in conjunction with something elseā€¦ like off-brand firewalls, anti-virus/malware, or other security products.

I wouldnā€™t be able to diagnose without knowing everything else thatā€™s installed on the machine. But, of course, thatā€™s considerably out-of-scope of this thread or any thread in these forums. :slight_smile: But Iā€™d start by taking a look at what AV/AM and any other soft-firewalls that may be installed.

END OF LINE

3 Likes

It says it in the status bar bottom left on Chrome whenever I connect to a new site. On a slow laptop it stays there for several seconds before drawing the page. It is less than second on my desktop machine. All my machines have the same virus checker, NOD32.

Probably time to get a new laptop but it seems crazy to encrypt anything other than login for sites that broadcast public information. Even my bank doesnā€™t use https until I login.