SMFNEW Support Forum

Your Forum => Support => Topic started by: ceekay on June 29, 2017, 01:51:47 am

Title: Insecure password warning
Post by: ceekay on June 29, 2017, 01:51:47 am
Morning guys, just wondered if theres anything that can be done about the insecure password warning that we seem to be getting. I'm also getting it on Firefox now as well as google chrome and I have a feeling it could be off putting for members.

This morning when I went on my forum it had logged me out and a new page in firefox opened up with this warning:
Insecure password warning in Firefox Firefox will display a lock icon with red strike-through (https://support.cdn.mozilla.net/media/uploads/gallery/images/2015-11-17-12-13-18-2faa61.png) in the address bar when a login page you’re viewing does not have a secure connection. This is to inform you that if you enter your password it could be stolen by eavesdroppers and attackers.
Starting in Firefox version 52, you will also see a warning message when you click inside the login box to enter a username or password.

Obviously this is going to be quite scary for some members, Can anything be done? Thanks in advance.

Title: Re: Insecure password warning
Post by: SMFNew on June 29, 2017, 07:00:15 am
Still working on a solution. Unfortunately it is complicated.
Title: Re: Insecure password warning
Post by: Jacob on June 29, 2017, 10:40:40 am
This occurs because SMFNew currently doesn't have SSL encryption meaning the info COULD potentially be intercepted by hackers. It's unlikely to happen but if it does happen, it'd be more likely to happen on an unsecured (no password) wi-fi connection, such as public internet at restaurants, hotels, etc. If you're on a connection that is secured via a password, typically it's less likely that the connection could be intercepted.

It's an issue being fixed but for the meantime, you shouldn't have to worry about it unless your users connect from a public or unsecured wi-fi connection. :)
Title: Re: Insecure password warning
Post by: ceekay on June 29, 2017, 11:10:18 am
Thanks both, I'm pretty sure most of my members connect from home or via their cell networks. Can you update me if you manage to find a fix or workaround for this please.

While I'm here, what happened to the pro hosting that Ive seen mentioned, when I click on the link now it says page not found.
Title: Re: Insecure password warning
Post by: SMFNew on June 30, 2017, 07:27:21 am
Pro hosting at the time when I took over smnew did not have a good hosting solution ready to go. I now do with hostit.host but focus mostly on normal forum hosting.
Title: Re: Insecure password warning
Post by: Jacob on June 30, 2017, 09:18:01 am
Original Pro offered a full hosting plan but it wasn't in the best shape; we do have upgrades though, which you can find through the Forum Upgrades section of the Admin panel.
Title: Re: Insecure password warning
Post by: ceekay on June 30, 2017, 09:53:19 am
Yeah I have looked at them, I will certainly keep them in mind, thank you.
SimplePortal 2.3.7 © 2008-2024, SimplePortal