Why do I see website not secure?

[dltflt]

Every time I am logging into FOG I see “Website not secure” message in the url area. Why?  And is anyone else seeing this?

 

[peter halle]

Hey Don.

I don't see that coming up but as far as I know the website has always been http:  not https:

Have you changed something to your browser like an add-on or a "safe web" type program?  Those would be the type of things that would give you that kind of message I believe.

Peter

 

[dltflt]

I’m not Howard. I’m Don and nothing other than standard IOS updates. It did just start this this past week.

 

[dltflt]

This is what I see when I click in the password area.

 

[PaulH99]

This was added in iOS 11.3:https://support.apple.com/en-us/HT208672

Google Chrome started doing the same thing in January 2017:https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html

 

[Mario Turcot]

To avoid that "problem" thick the Always stay logged box, unless you are on a public computer

 

[AlexThePalex]

Biggest non-sense ever. Security warning? That should be obvious from the beginning.

What they're trying to convince you of, is as if there are websites that somehow are secure, while others are not.

But there are no secure websites.

In the mean time, you're not going to get your credit card plundered by logging into FOG. Only when you feel compelled to do it yourself, that's of course the danger here.

 

[rmhinden]

It would be better if the FOG side used https.  Most sites are doing it and as other have noted web browsers are starting to complain if the web access is not secure. 

Assuming Festool has outsourced the hosting of the site to a hosting company, it should be easy to enable https.

 

[Administrator_JSVN]

Any anyone else sees this message, please let us know what operating system and browser you're using.

This is more likely isn't anything to worry about, but we'll review it with our IT team.

(Tyler)

 

[dltflt]

Thanks guys. Makes feel better there is a logical reason.

 

[android]

Biggest non-sense ever. Security warning? That should be obvious from the beginning.

What they're trying to convince you of, is as if there are websites that somehow are secure, while others are not.

No, HTTPS only means that the communication between your browser and the website is securely encrypted and that the website has a certificate. The certificate that is issued to the site owner contains the site name, so the presence of the lock icon means that you have a secure connection to the site you intended to connect to. It does not imply the website cannot be hacked.

The main reason you want a secure connection, even to non-commercial sites, is that many people use the same or similar passwords. So if your plain text password is captured, it can be used to figure out your password to some other secure site.

But there are no secure websites.

Correct.

 

[android]

Any anyone else sees this message, please let us know what operating system and browser you're using.

This is more likely isn't anything to worry about, but we'll review it with our IT team.

(Tyler)

All browsers are now reporting sites with HTTP connections as "insecure". Some more intrusively than others.
Ultimately, the only way to make it go away is to fork over some money to a CA for a site certificate.
This is an unfortunate added expense for sites that don't generate much revenue.

 

[AlexThePalex]

No, HTTPS only means that the communication between your browser and the website is securely encrypted and that the website has a certificate. The certificate that is issued to the site owner contains the site name, so the presence of the lock icon means that you have a secure connection to the site you intended to connect to. It does not imply the website cannot be hacked.

Please, do no nitpick over technicalities. This whole thread is an example, maybe read the first post back. Most users of the internet do not have that much knowledge about all details of it, and as soon as they see "not secure", an alarm bell goes off, justified or not.

 

[Sparktrician]

Tyler, I've attached a PDF file showing the same message. 

I'm using Win 10 Pro with Firefox 59.0.2. 

 

[ben_r_]

Any anyone else sees this message, please let us know what operating system and browser you're using.

This is more likely isn't anything to worry about, but we'll review it with our IT team.

(Tyler)

All browsers are now reporting sites with HTTP connections as "insecure". Some more intrusively than others.
Ultimately, the only way to make it go away is to fork over some money to a CA for a site certificate.
This is an unfortunate added expense for sites that don't generate much revenue.

Exactly! Super annoying for selling on eBay too if you want to host your images on a server other than theirs.

 

[Matty04]

Me too
iOS 11.3    Safari-google
Probably has to do with the recent iOS 11.3 update as was mentioned previously.

 

[dltflt]

No, HTTPS only means that the communication between your browser and the website is securely encrypted and that the website has a certificate. The certificate that is issued to the site owner contains the site name, so the presence of the lock icon means that you have a secure connection to the site you intended to connect to. It does not imply the website cannot be hacked.

Please, do no nitpick over technicalities. This whole thread is an example, maybe read the first post back. Most users of the internet do not have that much knowledge about all details of it, and as soon as they see "not secure", an alarm bell goes off, justified or not.

Yep, that is exactly what happened.

EDIT> fixed quote box.