Printable Version of Topic

Posted by: jim_hoyland Mar 2 2024, 05:59 PM

What’s this mean about not secure / private. ?
Seems like I have to log in every time now ??


Attached thumbnail(s)

Posted by: NARP74 Mar 2 2024, 06:05 PM

Cert issue or not https required. Old version issue???

Posted by: SirAndy Mar 2 2024, 06:58 PM

It means we don't have SSL. It's been discussed here many times over the years.

That should not affect you staying logged in though, that might be a separate issue.

Posted by: rjames Mar 3 2024, 12:25 AM

Just make sure you don’t use a username/password combo here that you also use somewhere else, or put any sensitive information in a dm since it none of the data transmitted between your browser and this site is encrypted.

Posted by: NARP74 Mar 3 2024, 12:13 PM

At the risk of repeating a question, don't want to search, why don't we fix it? This has been a standard in the industry for years now.

Posted by: SirAndy Mar 3 2024, 12:30 PM

Same answer as last (last and last) time:
The forum software is 20+ years old and was not written with SSL in mind.

It would be a fairly large undertaking to make it work with SSL and i was never able to find the time to tackle that task.

Posted by: rhodyguy Mar 3 2024, 01:20 PM

Clearing the device history, Safari (I do it daily at a minimum), results in having to re-sign in everywhere. The amount of trackers blocked is unbelievable. I don’t think anyplace is truly ‘safe’. Never a dull moment. My tablet is as close as I get to a ‘tracking device’.

Posted by: windforfun Mar 3 2024, 02:09 PM

I use McAfee. What's SSL?

Posted by: SirAndy Mar 3 2024, 05:15 PM

If you have to ask, this thread is probably not for you ...

Posted by: windforfun Mar 3 2024, 05:36 PM

https://www.noip.com/ssl-certificate-sale?msclkid=33f68b1991371813ae89eefc981060dd

I like it. Is it similar to a VPN, which I used to use all the time?

Posted by: Dave_Darling Mar 3 2024, 06:13 PM

No. It's separate from a VPN.

It's the part that allows the "secure" part of "https://". A VPN works on a different level, and incorporates more than just encryption.

--DD

Posted by: windforfun Mar 3 2024, 06:59 PM

So how is https more secure than http? My banks use https. Does the SSL certificate "install" the encryption between the website & its users? What really is encryption anyway? Thanks Dave.

Posted by: windforfun Mar 3 2024, 08:10 PM

It is now Andy.

Posted by: GregAmy Mar 3 2024, 09:28 PM

OK, I'm a geek. Ok, I'll offer an explain (and other geeks, please insert).

SSL, Secure Sockets Layer. It means the conversation betwen you and the forum is encrypted. Which means someone casually (or intentionally - are you going through a divorce?) can "tap" the line and watch your conversation.

Same kinda idea as the old deal with POTS when you could put two alligator clips on an analog phone line with a speaker and listen into a conversation. But with SSL, all you would hear is a bunch of screeches and howls instead of human conversation.

It's standard practice for web sites to have an SSL cert(ificates). It's not hard but if you're running old shit and you really don't give a crap about the conversation, then it's really not that important. Both cases apply here.

We could beat on Andy to make it happen. And there's a lot of talent here that could make it happen. But is it worth the effort? And the money? Not really.

On Chrome you'll get the warning below, knowing that anything and everything you do on the forum can be "tapped". Including your password exchange (follow the password advice above). But really, other than the password (follow the password advice above) all this information is being "crawled" by "spiders" anyway, and getting tossed into a large database (search Googles and the Internet Archive if you don't believe me) so it's really not that important.

So yup, your conversation is not encrypted. And in the reality of things, it's not important.

Enjoy.


Attached image(s)

Posted by: windforfun Mar 3 2024, 10:16 PM

Which means someone casually (or intentionally - are you going through a divorce?) can "tap" the line and watch your conversation.

Can't "tap" into the line.

How is the encryption added to the basic digital signal? So the encryption is first encoded onto the basic signal at the transmitter, but how does the receiver know how to decode or remove the encryption?

This perhaps reminds me of an old analog approach, invented by Hedy Lamarr, which is the basis for Blue Tooth technology, where you simply change the carrier frequency of the transmitted analog signal over fixed time periods. The receiver although has to know a priori what the new carrier frequencies will be. The navy eventually used this for torpedo control without enemy intervention.

https://leaders.com/articles/leaders-stories/hedy-lamarr-inventions/

Many thanks indeed for the input!!!

Posted by: NARP74 Mar 4 2024, 09:15 AM

Wiping out anything less than TLS 1.2 at a few places I am working now.

Posted by: windforfun Mar 4 2024, 10:42 AM

https://stackoverflow.com/questions/3968095/how-does-https-provide-security#3968260

Posted by: Dave_Darling Mar 5 2024, 05:41 PM

Encryption is a careful kind of scrambling of the information packets that go between two places on the network. The recipient can unscramble the packets and retrieve the information. It is possible for some other party to unscramble stuff, but it takes a whole lot of computing power and time.

The non-"s" version leaves the traffic between the endpoints unencrypted. So someone tapping into the connection could see "What really is encryption anyway" that you typed above, as you sent it.

Certificates are kind of vouchers that someone is who they say they are, and that you can trust that they are. I think they also contain part of the encryption key that is used in doing the kind of scrambling above.

The details are very complicated and have mostly fallen out of my brain by this point.

--DD

Posted by: jim_hoyland Mar 5 2024, 06:07 PM

Follow up: I only have to log-in on my iPhone; iPad is fine.
And, when I do relog in, I don’t get the autofill assist like other sites. So every time I close out of World, I get logged out ?????


Attached thumbnail(s)

Posted by: SirAndy Mar 5 2024, 06:51 PM

Sounds like the problem is with your iPhone ...

Posted by: jim_hoyland Mar 5 2024, 06:57 PM

Is there something I can check in settings ? And, it only occurs with 924 World

Posted by: Superhawk996 Mar 5 2024, 07:41 PM

Posted by: SirAndy Mar 5 2024, 07:43 PM

Well, looks like you found your problem ...

Posted by: jim_hoyland Mar 5 2024, 07:57 PM

I have remember me checked
Seems to be related to Private Browsing ???
But it only affects my World log in


Attached thumbnail(s)

Posted by: SirAndy Mar 5 2024, 08:11 PM

Well, "private browsing" does not remember anything (that's by design and the "private" part of "private browsing").

I'm guessing it works for other sites because you have auto-fill enabled for those sites.

Check your browser settings and make sure you don't have 914world blocked from auto-fill.

Posted by: jim_hoyland Mar 6 2024, 05:43 PM

Update: it appears to have resolved itself for now.


Attached image(s)