Is anyone else having issues with getting a secure connection?

paingawd · October 18, 2018, 11:11pm

I’ve been using the site for a while now, and recently I’ve noticed that the connection comes up as “not secure” I use https as a default setting in Chrome for all of my bookmarked sites, and if I try to type the address in manually as https://www.e-liquid-recipes.com, Chrome starts throwing warnings everywhere. @daath, is the site’s cert current?

Specs: Chrome OS, version 69.0.3497.120
Browser: Chrome (Version number should be the same as OS, since the browser is a major function of the system,but I could be wrong-It’s happened before!)

Vaporraven · October 18, 2018, 11:21pm

I too just noticed that i’m not using HTTPS on here currently. I also have HTTPS as default on chrome in general

eStorm · October 18, 2018, 11:27pm

This has been a long while going on actually. Thought that someone is working on that.

paingawd · October 18, 2018, 11:28pm

Yeah, after typing that out I started thinking about it. If my memory serves, it’s been like that for a little while. Then again, some days I can’t remember what I ate for breakfast, so take all the above with the usual disclaimers!

anon13011326 · October 18, 2018, 11:45pm

most likely ELRs SSL certificate has expired or needs updating, and yes its been that way for quite awhile

SessionDrummer · October 19, 2018, 1:08am

I’m not having problems, but you are correct.

Unable to communicate securely with peer: requested domain name does not match the server’s certificate.

HTTP Strict Transport Security: false
HTTP Public Key Pinning: false

Certificate chain:

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

adary · October 19, 2018, 7:23am

setting up free ssl on discourse is super easy. if the administration needs help with that i can help out (especially if it’s hosted on digitalocean)

the site should also be easy-ish to set up with free ssl from let’s encrypt

anon28032772 · October 19, 2018, 7:44am

Maybe I’m getting old, but I thought this has been an issue for a long time already…
I just added the exception so it doesn’t complain

adary · October 19, 2018, 7:53am

Ever since I came to ELR (4 months or so) it didn’t have tls. The warnings are popping up now in the new version of Chrome that came out in the last few weeks. Google decided to give the warning to each site not using tls

anon28032772 · October 19, 2018, 9:27am

Aha, I see why, I’m using http so it doesn’t complain about certificate, just says Not Secure next to the url.
I’ve got the latest version of chrome and https just says the site does not exist.

Plunderdrum · November 1, 2018, 4:44pm

I’ve just started seeing the warning icon today. On Chrome, Samsung S8. That little triangle was never there before. Am I ok?

paingawd · November 1, 2018, 4:48pm

I’ve no clue. I know just enough about computers to be a hazard to myself some days.

TorturedZen · November 1, 2018, 7:05pm

You should be fine, just don’t use credit or bank info or anything you wouldn’t want intercepted.

anon28032772 · November 1, 2018, 7:06pm

You’re running on an http connection, not an https connection, that’s why you’re getting the warning.
It means that all traffic between you and the web server is sent in “clear text”, so if anyone is snooping in between, they get to see all information.
The biggest issue is that your login/password are clear text, so I’d make sure you have a unique password for ELR (which I advise you to do for every website anyways).

There is no financial stuff going on here, except perhaps a contribution, which would happen over a secure connection… so no worries there.

muth · February 22, 2019, 5:18pm

Certificates are pretty darn expensive.

adary · February 22, 2019, 5:37pm

unless you use free ones.

This is my discourse (in hebrew) using ssl and a free certificate. Took me 3 minutes to set it up

muth · February 22, 2019, 5:43pm

Cool beans!