ShipSpotting.com Forum

Shipspotters all over the world => Site related news, functions and modules => Topic started by: csaba on March 17, 2017, 08:36:20 pm



Title: Shipspotting "not a secure site"?
Post by: csaba on March 17, 2017, 08:36:20 pm
This message keeps popping up as of yesterday when I try to log in? Anybody else has it? Same happens when I go to "equasis". What is the deal?
Many thanks...


Title: Re: Shipspotting "not a secure site"?
Post by: peter j. fitzpatrick on March 17, 2017, 08:51:43 pm
no not me all okay this end  :)


Title: Re: Shipspotting "not a secure site"?
Post by: Jens Boldt on March 17, 2017, 09:01:51 pm
Hi csaba, which browser do you use? I'm using Firefox and get the same messages. Probably a Firefox-update to remind us that log-in to Shipspotting and Equasis is not encrypted. If you look at your address bar before logging in you see a crossed-out closed lock. If for example you have an account with Amazon you'll see a green closed lock in the left of your address bar, which means log-in is encrypted.

IT-experts please correct me if the explanation is wrong...

Cheers
Jens


Title: Re: Shipspotting "not a secure site"?
Post by: Allan RO on March 17, 2017, 09:24:08 pm
since the last Firefox update a couple of days ago I'm getting the message when I log on to Equasis and Marine Traffic = so I ignore it as a glich

Allan


Title: Re: Shipspotting "not a secure site"?
Post by: csaba on March 17, 2017, 10:31:45 pm
Hi csaba, which browser do you use? I'm using Firefox and get the same messages. Probably a Firefox-update to remind us that log-in to Shipspotting and Equasis is not encrypted. If you look at your address bar before logging in you see a crossed-out closed lock. If for example you have an account with Amazon you'll see a green closed lock in the left of your address bar, which means log-in is encrypted.

IT-experts please correct me if the explanation is wrong...

Cheers
Jens
Hi Jens,
I use Firefox and what you have described is exactly what is happening. No updates from Firefox, thought.


Title: Re: Shipspotting "not a secure site"?
Post by: andrecas on March 18, 2017, 02:42:37 am
I use Chrome and noticed the same caption several days ago. In the upper panel on my screen there is a circled "i" and site name. When I click on the circle  (when logged in or not) a drop down panel appears with statement....
"Your connection to this site is not secure. You should not enter any sensitive information on this site (for example, passwords or credit cards), because they could be stolen by attackers".
Not being a techy type, this makes me wonder when I do enter a password to log onto site just how vulnerable I may be to possible hackers.... ???


Title: Re: Shipspotting "not a secure site"?
Post by: andrecas on March 18, 2017, 03:00:19 am
I meant to include the following in previous post....
Different situation with Marine Traffic site. Whether I open site just to browse or look at live map or when logged in, the panel in upper part of screen shows a green padlock with the word "secure".


Title: Re: Shipspotting "not a secure site"?
Post by: Cody Williams on March 18, 2017, 05:58:54 am
Hi Everyone,

I will email Henrik and ask him about this. I will post back here when I receive an answer.

I’ve written a little explanation below about insecure sites and the green padlock.

Anytime you visit a webpage, your internet browser (Chrome, Firefox et cetera) requests an SSL certificate. If the website has one, it tells the browser that it is genuinely that website and lets establish a secure encrypted connection. If this is successful a green padlock is displayed. This is important if usernames, passwords and other personal information is being exchanged. An unsecured connection means that there is no certificate and no secure encrypted connection has been established, Insecure sites can be exploited by hackers though a “man in the middle attack”, although that’s quite rare.

More information can be found here:
∙ Website - What is SSL? (https://www.digicert.com/ssl.htm)
∙ YouTube Video: Man in the Middle Attacks by Computerphile (https://www.youtube.com/watch?v=-enHfpHMBo4&list=PL96C35uN7xGLux5q2c4P_IqbKF11-pfsR)

Thank you for pointing this out, Csaba.

Best wishes
Cody


Title: Re: Shipspotting "not a secure site"?
Post by: Pier Master on March 18, 2017, 08:15:11 am
Using Chrome...

Not Logged In - Address bar says Not Secure
Logged In - It disappears

Regards, Brian


Title: Re: Shipspotting "not a secure site"?
Post by: pieter melissen on March 21, 2017, 09:54:23 am
I think it is a Firefox thing, happens with me here and also on Miramar. Just log in again and it works. The only thing annoying is that my computer does not remember my previous visit, so I always have to log on.


Title: Re: Shipspotting "not a secure site"?
Post by: Henrik Soderberg on March 22, 2017, 03:33:41 pm
Hi all,

It's nothing new. It's just that a few browsers are starting to make warnings when we are not using https. We are in the process of moving over to this, as most other websites are, but due to the size and functionality we provide it's a big job to do. If we do it now, several things would probably stop working.

A reminder and security tip: make sure you are not using the same password for all services. Especially services that concerns money or your email accounts. Don't use those passwords on other websites, like this one.

Regards,
Henrik


Title: Re: Shipspotting "not a secure site"?
Post by: andrecas on March 22, 2017, 04:01:27 pm
Many thanks Henrik and Cody for prompt follow up. You've put my mind at ease...!