To whom it may concern, why is this website continually being flagged as unsafe on multiple browsers ?? Is it a matter of cash outlay to update your certificate? It was mentioned a while ago by Gusington or Jarhead I think about getting it updated but nothing has been done.
Don't get me wrong as this is my most visited site (daily) Just kinda concerned is all. Thanks for any replies.
Bruce
My Firefox doesn't flag it as unsafe. Maybe I told it not to bother me about the whole http/https thing.
I should have said my browsers report it as unsecure. Believe it may be a good idea in this day and age to pay attention to security on the internet. Not to say that I'm preaching as I hate that and everyone is free to do as they wish but I wanted to bring it to everyones attention.
I'm not sure why it is being flagged as unsecure on your end. It isn't in my browser. I checked just a couple of weeks ago and our SSL certificate is totally up to date.
Starfury and Gusington are total sluts, so maybe your browser is picking up on their unsafe dating habits and poor personal hygiene?
Seriously though, if you have any idea why that may be the case on your end, let me know and if there is something I can do for my part, and I will.
Hopefully this shows up. Thanks for the replies :)
I had also posted this in the past where people see weird browsing results depending on what specific address they use to access the site...this is because of the security being different between forum and other pages. Here is some info on it from the past post.
Yep, use of HTTPS in the web site address is the cause. If you turn on developer tools for Chrome which allows you to debug, you'll see the following error displayed:
Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure element '<URL>'. This request was automatically upgraded to HTTPS, For more information see <URL> index.php:4 Mixed Content: The page at 'https://www.grogheads.com/forums/index.php?board=5.0' was loaded over HTTPS, but requested an insecure stylesheet 'http://grogheads.com/forums/Themes/default/css/index.css?fin20'. This request has been blocked; the content must be served over HTTPS.
Basically this means the main forum page is using an HTTPS connection (secure encrypted connection), therefore the other content it calls such as the various style sheets (responsible for formatting the page) must also use an HTTPS connection to be fully secure. As you can see in the above error message, the CSS files (style sheets) are using an HTTP connection, therefore its considered insecure and blocked resulting in the style sheets not loaded making the page appearance look bad. Since a normal user doesn't have control over changing the actual page source code to be HTTPS, only way for you to make it work is to change the main page to HTTP so they all match. I assume the forum software site/pages could be configured in a way to enforce full usage of HTTPS, therefore everything would be encrypted, not requiring the use of HTTP.
With HTTPS (secure-but issues loading content)
https://www.grogheads.com/forums/index.php
Without HTTPS (insecure-but content loads correctly)
http://www.grogheads.com/forums/index.php
Of course there is a downside in not using an HTTPS connection. Basically anything you type will not be encrypted and in theory available for someone to intercept if they knew how and were capable On a forum site, might not be a big deal, but hopefully your not using the same username and password for this site that you use for more sensitive sites such as banking:)
Thanks
^ I was going to say since time immemorial (2012) GH has showed up as 'insecure' for me because of the whole HTTP/HTTPS thing. Don't do your banking here.
And my hygiene has...improved.
At my age this is the only unsecure thing I get to do anymore. I'm here for the D-A-N-G-E-R! ^-^
Actual image of Sir Slash.
(https://m.media-amazon.com/images/I/81091pV9GwL._SY445_.jpg)
I'm the one on the left. O0
;D
I'll take over security.
(https://i.ibb.co/2Nxb5tW/540022-10150688957816857-1079304981-n.jpg)
Such a...photo
Thank you for explaining it all. Was wondering why different formats get pulled up...
Quote from: Grim.Reaper on July 13, 2022, 08:02:29 PM
I had also posted this in the past where people see weird browsing results depending on what specific address they use to access the site...this is because of the security being different between forum and other pages. Here is some info on it from the past post.
Yep, use of HTTPS in the web site address is the cause. If you turn on developer tools for Chrome which allows you to debug, you'll see the following error displayed:
Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure element '<URL>'. This request was automatically upgraded to HTTPS, For more information see <URL> index.php:4 Mixed Content: The page at 'https://www.grogheads.com/forums/index.php?board=5.0' was loaded over HTTPS, but requested an insecure stylesheet 'http://grogheads.com/forums/Themes/default/css/index.css?fin20'. This request has been blocked; the content must be served over HTTPS.
Basically this means the main forum page is using an HTTPS connection (secure encrypted connection), therefore the other content it calls such as the various style sheets (responsible for formatting the page) must also use an HTTPS connection to be fully secure. As you can see in the above error message, the CSS files (style sheets) are using an HTTP connection, therefore its considered insecure and blocked resulting in the style sheets not loaded making the page appearance look bad. Since a normal user doesn't have control over changing the actual page source code to be HTTPS, only way for you to make it work is to change the main page to HTTP so they all match. I assume the forum software site/pages could be configured in a way to enforce full usage of HTTPS, therefore everything would be encrypted, not requiring the use of HTTP.
With HTTPS (secure-but issues loading content)
https://www.grogheads.com/forums/index.php
Without HTTPS (insecure-but content loads correctly)
http://www.grogheads.com/forums/index.php
Of course there is a downside in not using an HTTPS connection. Basically anything you type will not be encrypted and in theory available for someone to intercept if they knew how and were capable On a forum site, might not be a big deal, but hopefully your not using the same username and password for this site that you use for more sensitive sites such as banking:)
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
Quote from: FarAway Sooner on July 15, 2022, 12:30:20 AM
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
It's not the browsers and it's settings fault, simply the way the site is currently configured. I have tried a number of browsers and they all do the same thing because of the security inconsistency on the site itself.
Quote from: Grim.Reaper on July 15, 2022, 05:03:06 AM
Quote from: FarAway Sooner on July 15, 2022, 12:30:20 AM
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
It's not the browsers and it's settings fault, simply the way the site is currently configured. I have tried a number of browsers and they all do the same thing because of the security inconsistency on the site itself.
The individual browser and settings must play a role because it is not a problem everybody has. For instance, I'm completely unaware of it.
If anyone knows how to make it better, rather than just complain about it, I'm all ears.
Quote from: Jarhead0331 on July 15, 2022, 06:33:20 AM
Quote from: Grim.Reaper on July 15, 2022, 05:03:06 AM
Quote from: FarAway Sooner on July 15, 2022, 12:30:20 AM
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
It's not the browsers and it's settings fault, simply the way the site is currently configured. I have tried a number of browsers and they all do the same thing because of the security inconsistency on the site itself.
The individual browser and settings must play a role because it is not a problem everybody has. For instance, I'm completely unaware of it.
If anyone knows how to make it better, rather than just complain about it, I'm all ears.
Are you accessing the site using this specific URL (with https): https://www.grogheads.com/forums/index.php
If your just accessing the site with "http" not "https" you wouldn't see the issue, which I am guessing most people are including myself nowadays because of the formatting issue. If your not seeing the issue with https, curious as to what browser your using. I guess it's totally possible if someone turned off security warnings/issues within the browser somehow they wouldn't see it either.
For me with standard browser settings (I didn't change any--out of the box), this issue happens in EDGE, Chrome, FireFox, and Brave which I suspect most people do the same.
As for fixing, it's not about complaining, not much users can do correct it as it would require someone who has access to change site configuration/pages. It would require someone updating the site pages to load the CSS files using https instead of http and then it would be over a secure connection and you wouldn't have the mismatch. Therefore the CSS would load fine and the formatting would be corrected. Not knowing how you administer your site, not sure if that is something you can do yourself or requires your hosting company.
Quote from: Grim.Reaper on July 15, 2022, 06:43:58 AM
Quote from: Jarhead0331 on July 15, 2022, 06:33:20 AM
Quote from: Grim.Reaper on July 15, 2022, 05:03:06 AM
Quote from: FarAway Sooner on July 15, 2022, 12:30:20 AM
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
It's not the browsers and it's settings fault, simply the way the site is currently configured. I have tried a number of browsers and they all do the same thing because of the security inconsistency on the site itself.
The individual browser and settings must play a role because it is not a problem everybody has. For instance, I'm completely unaware of it.
If anyone knows how to make it better, rather than just complain about it, I'm all ears.
Are you accessing the site using this specific URL (with https): https://www.grogheads.com/forums/index.php
If your just accessing the site with "http" not "https" you wouldn't see the issue, which I am guessing most people are including myself nowadays because of the formatting issue. If your not seeing the issue with https, curious as to what browser your using. I guess it's totally possible if someone turned off security warnings/issues within the browser somehow they wouldn't see it either.
For me with standard browser settings (I didn't change any--out of the box), this issue happens in EDGE, Chrome, FireFox, and Brave which I suspect most people do the same.
As for fixing, it's not about complaining, not much users can do correct it as it would require someone who has access to change site configuration/pages. It would require someone updating the site pages to load the CSS files using https instead of http and then it would be over a secure connection and you wouldn't have the mismatch. Therefore the CSS would load fine and the formatting would be corrected. Not knowing how you administer your site, not sure if that is something you can do yourself or requires your hosting company.
Wow. That last line is pretty fucking harsh and gratuitously nasty, don't you think? I'd expect more from someone like you. When the team who designed the site and forum abandoned everyone who is still here, they handed me a turd. I did my best and spent a small fortune of my own money to keep the forum alive, just so it would fucking load, all for the sake and benefit of the community. But thanks for telling me that I "don't know how to administer my site". And for the record, the hosting site won't touch the forum, because someone (not me) decided to design it with software that the host does not support.
I think he meant that he himself does not know how you administer it - it wasn't an attack.
Quote from: Jarhead0331 on July 15, 2022, 06:54:15 AM
Quote from: Grim.Reaper on July 15, 2022, 06:43:58 AM
Quote from: Jarhead0331 on July 15, 2022, 06:33:20 AM
Quote from: Grim.Reaper on July 15, 2022, 05:03:06 AM
Quote from: FarAway Sooner on July 15, 2022, 12:30:20 AM
That is handy. I learned something today!
Depending on your browser and your browser settings, I think that might also cause difficulties in loading anything fancier than a text-only series of hyperlinks. If my browser was choking on those style sheets for all that time, that'd explain why the site looked so fugly!
It's not the browsers and it's settings fault, simply the way the site is currently configured. I have tried a number of browsers and they all do the same thing because of the security inconsistency on the site itself.
The individual browser and settings must play a role because it is not a problem everybody has. For instance, I'm completely unaware of it.
If anyone knows how to make it better, rather than just complain about it, I'm all ears.
Are you accessing the site using this specific URL (with https): https://www.grogheads.com/forums/index.php
If your just accessing the site with "http" not "https" you wouldn't see the issue, which I am guessing most people are including myself nowadays because of the formatting issue. If your not seeing the issue with https, curious as to what browser your using. I guess it's totally possible if someone turned off security warnings/issues within the browser somehow they wouldn't see it either.
For me with standard browser settings (I didn't change any--out of the box), this issue happens in EDGE, Chrome, FireFox, and Brave which I suspect most people do the same.
As for fixing, it's not about complaining, not much users can do correct it as it would require someone who has access to change site configuration/pages. It would require someone updating the site pages to load the CSS files using https instead of http and then it would be over a secure connection and you wouldn't have the mismatch. Therefore the CSS would load fine and the formatting would be corrected. Not knowing how you administer your site, not sure if that is something you can do yourself or requires your hosting company.
Wow. That last line is pretty fucking harsh and gratuitously nasty, don't you think? I'd expect more from someone like you. When the team who designed the site and forum abandoned everyone who is still here, they handed me a turd. I did my best and spent a small fortune of my own money to keep the forum alive, just so it would fucking load, all for the sake and benefit of the community. But thanks for telling me that I "don't know how to administer my site". And for the record, the hosting site won't touch the forum, because someone (not me) decided to design it with software that the host does not support.
Um, what did I miss? My last statement does not imply anything you accused me of, so I guess back at you for attacking me. I was simply saying I don't have any personal knowledge how/who administrates your site so I can't provide you any meaningful help to correct it. Had nothing to do with your management. But geesh, guess see where I stand around here...
Quote from: Gusington on July 15, 2022, 06:56:09 AM
I think he meant that he himself does not know how you administer it - it wasn't an attack.
Thanks Gus, appreciate it...exactly right. I guess thought people would know better about me and the fact I have never attacked anyone....wow.
Yeah JH must have misread what you originally posted.
Shit. You're right. I misread your comment and thought that it said, "not knowing how to administer your site..." It's why I was so shocked to read that from you. I never would have expected that and I guess it stung because it's not entirely untrue. LoL.
I'm sorry bud. I can admit when I'm the douche, and that was definitely douchey. It's the morning here and I'm getting a 3 year old and a 9 year old both ready for camp while trying to prevent the puppy from shitting on the floor.
No one likes shit on the floor.
Look at all the grizzly grogs.. wait, I'm one of them! :bd:
Just for the record I also remember getting the same issues. The site tells me it is not secure as we speak. It just tells me "it's not secure so not to enter any sensitive information into the site" in effect. Any other site is fine and says it is secure because of the certificate being up to date.
Not an attack in any way shape of form. I am sure we are all on your side JH. Lately though security\spam\fraud and such have been on everybodies minds.
Quote from: Destraex on July 15, 2022, 09:24:44 AM
Look at all the grizzly grogs.. wait, I'm one of them! :bd:
Just for the record I also remember getting the same issues. The site tells me it is not secure as we speak. It just tells me "it's not secure so not to enter any sensitive information into the site" in effect. Any other site is fine and says it is secure because of the certificate being up to date.
Not an attack in any way shape of form. I am sure we are all on your side JH. Lately though security\spam\fraud and such have been on everybodies minds.
Agreed. I don't want to belittle or minimize the issue. Any appearance of being "unsecured" is not a good look and I want to resolve this. I just don't know how. I will look into it though and if I have to hire someone to do it, that will be considered. The concern is that when we touch things around here on the back end, there is a possibility that the entire house will break and come crashing down, so I'm always scared to poke sleeping bears.
Quote from: Jarhead0331 on July 15, 2022, 09:27:15 AM
Quote from: Destraex on July 15, 2022, 09:24:44 AM
Look at all the grizzly grogs.. wait, I'm one of them! :bd:
Just for the record I also remember getting the same issues. The site tells me it is not secure as we speak. It just tells me "it's not secure so not to enter any sensitive information into the site" in effect. Any other site is fine and says it is secure because of the certificate being up to date.
Not an attack in any way shape of form. I am sure we are all on your side JH. Lately though security\spam\fraud and such have been on everybodies minds.
Agreed. I don't want to belittle or minimize the issue. Any appearance of being "unsecured" is not a good look and I want to resolve this. I just don't know how. I will look into it though and if I have to hire someone to do it, that will be considered. The concern is that when we touch things around here on the back end, there is a possibility that the entire house will break and come crashing down, so I'm always scared to poke sleeping bears.
Yeah I get you. I would really miss it if it fell over. This site is invaluable. There simply aren't that many actual communities left online apart from the "pop up shop" style discord ones which could be here today gone tomorrow and usually people do not get to know each other properly in. Other forums like the steam ones are often randoms populated by drop ins and trolls. Not many game companies run their own forums that are more or less exclusive for the fans who have both found and made an account to post on the forums. So yeah Grogheads is a best of breed and other forms of online community are kinda "they don't make em like they used to" story.
P.S. In fact now that I think aboutit sadly, their are probably records right here of people that no longer even exist. I wonder if any kids would do a search for their ancestors writings in places like this or if anybody will for my posts once I am gone.... ok, now I have gone completely wierd. Backup the internet, we may have degrees on the study of old communities in places like this some day when computers become good enough to discover patterns from internet periods of time, like prehistoric periods of time.
Quote from: Destraex on July 15, 2022, 09:34:44 AM
P.S. In fact now that I think aboutit sadly, their are probably records right here of people that no longer even exist. I wonder if any kids would do a search for their ancestors writings in places like this or if anybody will for my posts once I am gone.... ok, now I have gone completely wierd. Backup the internet, we may have degrees on the study of old communities in places like this some day when computers become good enough to discover patterns from internet periods of time, like prehistoric periods of time.
Aside from the social aspects of the forum and the value all of that discourse brings, the point you raise is really another aspect to the priceless nature of the site. We have ten years of data here and it would be terrible if something happened and...all those moments were lost to time...like tears in the rain.
(https://upload.wikimedia.org/wikipedia/en/1/16/BladeRunnerRoyBattySpeech.jpeg)
^Are you displaying...emotion? I do not understand.
There is definitely data/info here from people who no longer exist. Our old friends Bismarck and Mr. Bigglesworth come to mind, amongst others.
Am I understanding the info above to mean that if our security certificates are updated that will help the security warning issue somewhat?
Quote from: Gusington on July 15, 2022, 10:17:14 AM
Am I understanding the info above to mean that if our security certificates are updated that will help the security warning issue somewhat?
I don't think that is correct. I wish it was that simple. I think Grim's initial post explained it in terms I can somewhat understand. Basically, the main page is secure, but it uses other pages, particularly related to style and format, that are not, and as a result of the mismatch, on certain browsers, the forum won't load the style pages that are not secure and so it displays all FUBAR.
In order to correct it, we need to go to each of those unsecured elements within the back-end and reconfigure them.
Ok, got it
Quote from: Jarhead0331 on July 15, 2022, 10:33:26 AM
Quote from: Gusington on July 15, 2022, 10:17:14 AM
Am I understanding the info above to mean that if our security certificates are updated that will help the security warning issue somewhat?
I don't think that is correct. I wish it was that simple. I think Grim's initial post explained it in terms I can somewhat understand. Basically, the main page is secure, but it uses other pages, particularly related to style and format, that are not, and as a result of the mismatch, on certain browsers, the forum won't load the style pages that are not secure and so it displays all FUBAR.
In order to correct it, we need to go to each of those unsecured elements within the back-end and reconfigure them.
That is basically it. Although I have done web development, never have supported a forum site like this so I am not sure how the change would be made. It could be as simple to find the page/links that reference http and change to https. Or as you mentioned a config setting somewhere, not sure. Completely understand it could open a can of worms if done incorrectly so understandable in using caution to make any changes.