Heck, for months, Iāve had issues with not being able to load the forum at all some nights, no matter what voodoo I try. Ironically, on those nights I have no issues with streaming video from any of the major sources, go figure.
Iām getting a white screen of death in chrome, Godzilla, and all mobile brozers. I never thought Iād say this, but, thank goodness for internet explorer.
Unable to get into the forum on my desktop (with Chrome) -cleared out cache and deleted history - lost all my stored passwords and still no forum. Only in Explorer and my laptop nowā¦
But when anybody can see everything written in these forums, what difference does it make that a man in the middle canāt see them by intercepting the web traffic?
well in part because not all parts of the forum are public. thereās a beta area, as i understand it, there are direct messaging features, etc. i mean itās just good policy, but there is an actual potential need, too.
More than anything, itās the current industry standard for all websites to use https. This does not mean all website must use secure connects as the non-secure http still works, but https as a standard helps to insure there are no unexpected data breachs. Youāre correct there is nothing on this site that really needs to be secure, but using https does not hurt anything, other that the potential for slightly slower response times due to the overhead of the security. Thatās a small price to pay for the added security.
In general, I know when Iām on a highly reputable site because they implemented https even when itās not required just to ensure there are no security problems over the wire. Itās just one of many indication the company / organization is security conscious.
Mostly because your account login is set in the clear (people could see your username and password), when you login/connect.
Also, as the push to get SSL everywhere continues, people are going to experience the web browsers less cooperative on user logins (on websites not SSL). Chrome has announced that the current Chrome Beta version (destined to be version 56) will be very clear post any password or credit card fields that are not on an SSL webpage.
It will probably reach a point in the near future that browsers (and other internet software apps) will make the user jump through additional steps access accounts (username and passwords) and credit card fields if the site is not encrypted. (I am not real thrilled that browsers are forcing changes instead of people changing themselves).
Biggest push is because people use the same username and password across many different websites and the bad guys know it . Just look to Yahoo finally admitting 1 Billion accounts compromised in 2013 and 500 Million compromised in 2014. Guarantee that many of those accounts use the same username and password at Yahoo as they use on Amazon, their credit cards, banks and medical sites.
Seems like a sledge hammer to crack a nut. I recently upgraded to high speed broadband only to find I am waiting for āestablishing secure connectionā every time I open a new web page.
Just like 80 years ago no body thought about locking their car, we all take that for granted today that when we get out of our car we lock it and have to unlock it when we return. Itās additional overhead, but itās just the way to secure web connections and itās the way of the future on the web.
I fully understand your point and hope you donāt think there are several of us ganging up on you as your point of view is completely valid. Thanks for questioning the change.
Itās really not. Adding a cert to your site takes minimal effort to deploy and maintain. Almost every site you go to is secured. From Google.com to YouTube.com to your bankās website. Itās not like this is something new. Everybody does it and it really doesnāt affect anything (aside from making web browsing a little more secure).
Interesting. Not a network guy so know just enough to keep myself out of trouble. Never once have I had the āestablishing secure connectionā notification. Have a secure HTTPS connection through Chrome. Wonder if someone more knowledgeable understands or can help you find what settings might help. For all I know you are a network/security engineer.
Let me start by saying Iām a Network Engineer with over 20 years experience.
Itās pretty rare, but Iāve seen this behavior before. Itās a Chrome-specific message. But ultimately, itās not Chromeās fault. Itās always in conjunction with something elseā¦ like off-brand firewalls, anti-virus/malware, or other security products.
I wouldnāt be able to diagnose without knowing everything else thatās installed on the machine. But, of course, thatās considerably out-of-scope of this thread or any thread in these forums. But Iād start by taking a look at what AV/AM and any other soft-firewalls that may be installed.
It says it in the status bar bottom left on Chrome whenever I connect to a new site. On a slow laptop it stays there for several seconds before drawing the page. It is less than second on my desktop machine. All my machines have the same virus checker, NOD32.
Probably time to get a new laptop but it seems crazy to encrypt anything other than login for sites that broadcast public information. Even my bank doesnāt use https until I login.