This site is not secure

This section is for posting questions which are not directly related to WYSIWYG Web Builder.
Examples of off topics: web server configuration, hosting, programming related questions, third party scripts.

Note that these questions will generally not be answered by the administrators of this forum.
Post Reply
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

This site is not secure

Post by alex4orly »

A new website I established here : http://probusashburton.org.au/
Visitors are getting this message - This site is not secure when visiting it.
Is there anything I can do about it?

Have seen it before with Firefox, but it is unknown who is visiting the site, I can't tell them all how to set up their browser...

Any suggestions?
angd
 
 
Posts: 4
Joined: Sat Feb 14, 2015 3:02 am

Re: This site is not secure

Post by angd »

you need to install ssl certifcate and have your http redirect to https. This will make it secure and its becoming a thing for google search. the unsecure site notification will become more pronounced in teh future, best to fix it now. Ususally your hosting provider can help with this. Be aware that you might have to change links internally and externally that are present on your site. what you want to achieve is the green paddlock. I recently did it with my site. take a look and click on the green padlock or the word secure. site is http://www.angel.com.au

Hope that helps
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

Re: This site is not secure

Post by alex4orly »

Hi Angel,

Thaks for the feedback, I don't see any green padlock on that page
Also, the URL you provided is http:// not https://

Can you give me some hint as how to go about it?

Cheers
angd
 
 
Posts: 4
Joined: Sat Feb 14, 2015 3:02 am

Re: This site is not secure

Post by angd »

when you click on the link i gave you you should see it as https: on your browser (to show the redirect effect). you can still just enter www.angel.com.au as well and there should be a paddlock or the word secure to the left of the url. If not clear your cache or use a different browser. talk to your hosting provider and ask them if they can help you install ssl certificate. hopefully they will support lets encrypt which is free. then you need redirects in the .htaccess file. ask them if they will do that for you. for your information i had a host in the usa that would not do that for another site of mine. changed hosts and the new one did it for me.
User avatar
BaconFries
 
 
Posts: 5328
Joined: Thu Aug 16, 2007 7:32 pm

Re: This site is not secure

Post by BaconFries »

Alex have you recently installed a ssl certificate to your site? have you configured it correctly on your host? are you on a shared hosting? What is the exact error message other than just "This site is not secure". Please note that this is not related to the software at all but with the ssl certificate (if installed) and how the browser reads it.
I would go check the validity of the certificate (if instaled) asking your host for assistance with this as it is not related to the software. If it is members of your community then you can tell the user/visitor to clear there cache and then try again. As mentioned it is for you to check for issues with the sites security certificate and that of the trusted root certificate for the (CA) Certification Authority on the site.
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

Re: This site is not secure

Post by alex4orly »

OK, I now noticed that paddlock...
Can you give me here the lines in your .htaccess and I will try

Cheers
angd
 
 
Posts: 4
Joined: Sat Feb 14, 2015 3:02 am

Re: This site is not secure

Post by angd »

alex the best way to do this is to talk to your hosting provider to see if they will help you with the ssl certificate and the redirects. Talk to the technical support of your hosting provider. This is the best way to do it.

good luck with it
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

Re: This site is not secure

Post by alex4orly »

Hi guys,
Just finished an online chat with the host company (Netregistry), I get the following error:

Your connection is not private
Attackers might be trying to steal your information from probusashburton.org.au (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID

Their answer is that : Unfortunately, the Self Signed SSL certificate is not supported... And If I wish I need to purchase a certificate at $199 p/a for the site

Any comments?
Thanks
User avatar
BaconFries
 
 
Posts: 5328
Joined: Thu Aug 16, 2007 7:32 pm

Re: This site is not secure

Post by BaconFries »

Search 'Google' for a cheaper alternative price to which your host is asking. Don't use a self signed certificate as they can easily be created by a attacker and made to look as if it is from your site when not!. Do you actually need one? are you storing sensitive information in a database by sensitive ie users credit card details, racial or ethnic origin; political opinions, date of birth etc etc or is it simply login information such as email and username? if the later I would save yourself money and not use one. But its entirely up to you and if you feel it worth the outlay search for a alternative seller at a cost you can afford and that your host will allow you to install.
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

Re: This site is not secure

Post by alex4orly »

Baconfries,
There is nothing important on this website, no databse...
It is just a Retired people club website which I did for them as a donation
But, they are now all afraid to access the site becasue of that warning coming up...

What can I do?

Cheers
User avatar
BaconFries
 
 
Posts: 5328
Joined: Thu Aug 16, 2007 7:32 pm

Re: This site is not secure

Post by BaconFries »

Don't know if anything can be done apart from going to the extreme of doing a reset of your hosting account to take it back to as it was when you originally purchased!. Have you removed the self signed certificate and all traces from your host/server?. Have your tried deleting your site from the server and reuploading without any references to 'https' this would be all urls/links, images with the https reference etc. Maybe call a community meeting or put out a written letter/email to everyone saying it safe and how to clear there browsers cache so that this won't show!. On a funnier side emigrate (sorry I know it not funny) wish I could at the moment due to being snowed in. Anyway try to reinsure all the members/users that it is safe to use and they have nothing to worry about here's hoping you can resolve this soon.
User avatar
alex4orly
 
 
Posts: 632
Joined: Mon Jan 20, 2014 8:17 am
Location: Australia
Contact:

Re: This site is not secure

Post by alex4orly »

This is a new site I did fo rthe club and published just 2 weeks ago
I have no references on it to https as far as I know...
Will wait to hear back from my host company

Thanks again
Post Reply