What’s this mean about not secure / private. ?
Seems like I have to log in every time now ??

Cert issue or not https required. Old version issue???

It means we don't have SSL. It's been discussed here many times over the years.

That should not affect you staying logged in though, that might be a separate issue.

Just make sure you don’t use a username/password combo here that you also use somewhere else, or put any sensitive information in a dm since it none of the data transmitted between your browser and this site is encrypted.

At the risk of repeating a question, don't want to search, why don't we fix it? This has been a standard in the industry for years now.

Same answer as last (last and last) time:
The forum software is 20+ years old and was not written with SSL in mind.

It would be a fairly large undertaking to make it work with SSL and i was never able to find the time to tackle that task.

Clearing the device history, Safari (I do it daily at a minimum), results in having to re-sign in everywhere. The amount of trackers blocked is unbelievable. I don’t think anyplace is truly ‘safe’. Never a dull moment. My tablet is as close as I get to a ‘tracking device’.

I use McAfee. What's SSL?

If you have to ask, this thread is probably not for you ...

https://www.noip.com/ssl-certificate-sale?m...e89eefc981060dd

I like it. Is it similar to a VPN, which I used to use all the time?

No. It's separate from a VPN.

It's the part that allows the "secure" part of "https://". A VPN works on a different level, and incorporates more than just encryption.

--DD

So how is https more secure than http? My banks use https. Does the SSL certificate "install" the encryption between the website & its users? What really is encryption anyway? Thanks Dave.

It is now Andy.

OK, I'm a geek. Ok, I'll offer an explain (and other geeks, please insert).

SSL, Secure Sockets Layer. It means the conversation betwen you and the forum is encrypted. Which means someone casually (or intentionally - are you going through a divorce?) can "tap" the line and watch your conversation.

Same kinda idea as the old deal with POTS when you could put two alligator clips on an analog phone line with a speaker and listen into a conversation. But with SSL, all you would hear is a bunch of screeches and howls instead of human conversation.

It's standard practice for web sites to have an SSL cert(ificates). It's not hard but if you're running old shit and you really don't give a crap about the conversation, then it's really not that important. Both cases apply here.

We could beat on Andy to make it happen. And there's a lot of talent here that could make it happen. But is it worth the effort? And the money? Not really.

On Chrome you'll get the warning below, knowing that anything and everything you do on the forum can be "tapped". Including your password exchange (follow the password advice above). But really, other than the password (follow the password advice above) all this information is being "crawled" by "spiders" anyway, and getting tossed into a large database (search Googles and the Internet Archive if you don't believe me) so it's really not that important.

So yup, your conversation is not encrypted. And in the reality of things, it's not important.

Enjoy.

Which means someone casually (or intentionally - are you going through a divorce?) can "tap" the line and watch your conversation.

Can't "tap" into the line.

How is the encryption added to the basic digital signal? So the encryption is first encoded onto the basic signal at the transmitter, but how does the receiver know how to decode or remove the encryption?

This perhaps reminds me of an old analog approach, invented by Hedy Lamarr, which is the basis for Blue Tooth technology, where you simply change the carrier frequency of the transmitted analog signal over fixed time periods. The receiver although has to know a priori what the new carrier frequencies will be. The navy eventually used this for torpedo control without enemy intervention.

https://leaders.com/articles/leaders-storie...arr-inventions/

Many thanks indeed for the input!!!

Wiping out anything less than TLS 1.2 at a few places I am working now.

https://stackoverflow.com/questions/3968095...ecurity#3968260

Encryption is a careful kind of scrambling of the information packets that go between two places on the network. The recipient can unscramble the packets and retrieve the information. It is possible for some other party to unscramble stuff, but it takes a whole lot of computing power and time.

The non-"s" version leaves the traffic between the endpoints unencrypted. So someone tapping into the connection could see "What really is encryption anyway" that you typed above, as you sent it.

Certificates are kind of vouchers that someone is who they say they are, and that you can trust that they are. I think they also contain part of the encryption key that is used in doing the kind of scrambling above.

The details are very complicated and have mostly fallen out of my brain by this point.

--DD

Follow up: I only have to log-in on my iPhone; iPad is fine.
And, when I do relog in, I don’t get the autofill assist like other sites. So every time I close out of World, I get logged out ?????

Sounds like the problem is with your iPhone ...

Is there something I can check in settings ? And, it only occurs with 924 World

Click to view attachment

Well, looks like you found your problem ...

I have remember me checked
Seems to be related to Private Browsing ???
But it only affects my World log in

Well, "private browsing" does not remember anything (that's by design and the "private" part of "private browsing").

I'm guessing it works for other sites because you have auto-fill enabled for those sites.

Check your browser settings and make sure you don't have 914world blocked from auto-fill.

Update: it appears to have resolved itself for now.