thisisms.com is NOT secure

If you're having any problems with the site, please post here and a site administrator will respond.
Post Reply
THX1138
Family Elder
Posts: 703
Joined: Tue May 14, 2013 2:00 pm
Has thanked: 1 time
Been thanked: 1 time

thisisms.com is NOT secure

Post by THX1138 » Sun Feb 18, 2018 10:50 pm

I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.

This is happening with both Google Chrome and Microsoft Edge browsers.

If you click the "i" with a circle around it that is to the left of the web address:
Google Chrome says:
Your connection to this site is not secure.
You should not enter any sensitive information on this site (for example, passwords or credit cards), because it could be stolen by attackers.
...

Microsoft Edge says:
Be careful here
Your connection to this website isn't encrypted. This makes it easier for someone to steal sensitive information like passwords.
Last edited by THX1138 on Mon Feb 19, 2018 12:01 am, edited 3 times in total.

User avatar
NHE
Volunteer Moderator
Posts: 5072
Joined: Sat Nov 20, 2004 3:00 pm
Has thanked: 1 time
Been thanked: 7 times
Contact:

Re: thisisms.com is insecure

Post by NHE » Sun Feb 18, 2018 11:11 pm

THX1138 wrote:I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.

This is happening with both Google Chrome and Microsoft Edge browsers.
Technically, ThisIsMS is not insecure, it just doesn't offer encryption.

User avatar
NHE
Volunteer Moderator
Posts: 5072
Joined: Sat Nov 20, 2004 3:00 pm
Has thanked: 1 time
Been thanked: 7 times
Contact:

Re: thisisms.com is NOT secure

Post by NHE » Mon Feb 19, 2018 12:58 am

THX1138 wrote:I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.
From the HTTPS Everywhere FAQ:

https://www.eff.org/https-everywhere/fa ... protect-me
When does HTTPS Everywhere protect me? When does it not protect me?

HTTPS Everywhere depends entirely on the security features of the individual web sites that you use; it activates those security features, but it can't create them if they don't already exist.

THX1138
Family Elder
Posts: 703
Joined: Tue May 14, 2013 2:00 pm
Has thanked: 1 time
Been thanked: 1 time

Re: thisisms.com is NOT secure

Post by THX1138 » Mon Feb 19, 2018 4:47 pm

So what does it take to make thisisms.com secure, with the https showing in the address bar :?:
It should look like this https://thisisms.com if the thisisms.com site is using a secure connection.


It's very common these days for websites to be secured using an encrypted connection. These sites show https at the beginning of the URL instead of http.
https indicates that the site is using a secure connection to keep communications private. It would seem desirable forthisisms.com to have a private, secure, https connection.

Check if a site's connection is secure
https://support.google.com/chrome/answer/95617?hl=en-GB

User avatar
NHE
Volunteer Moderator
Posts: 5072
Joined: Sat Nov 20, 2004 3:00 pm
Has thanked: 1 time
Been thanked: 7 times
Contact:

Re: thisisms.com is NOT secure

Post by NHE » Mon Feb 19, 2018 11:14 pm

THX1138 wrote:https indicates that the site is using a secure connection to keep communications private. It would seem desirable for thisisms.com to have a private, secure, https connection.
Keep in mind that what you post to ThisIsMS is readable by anyone in the world with an internet connection (except for private messages). This is quite different from interacting with a banking or shopping site where an encrypted connection is necessary.

User avatar
CureOrBust
Family Elder
Posts: 3355
Joined: Wed Jul 27, 2005 2:00 pm
Location: Sydney, Australia

Re: thisisms.com is NOT secure

Post by CureOrBust » Mon May 28, 2018 12:01 am

NHE wrote:Keep in mind that what you post to ThisIsMS is readable by anyone in the world with an internet connection (except for private messages). This is quite different from interacting with a banking or shopping site where an encrypted connection is necessary.
As NHE stated, its a PUBLIC FORUM, not a private secure financial one, this site is all about random people being able to read its contents. If you truly care about privacy, dont post anything private, dont PM anything private and/or financial, and most importantly, look into using a TOR browser. Hey, if its good enough for drug-dealers and other criminals...

User avatar
Arron
Volunteer Moderator
Posts: 900
Joined: Sun Feb 01, 2004 3:00 pm
Location: California, USA
Has thanked: 1 time

Re: thisisms.com is NOT secure

Post by Arron » Wed Jan 09, 2019 6:01 pm

Just to follow up here, we now have an SSL certificate and the site will show up as Secure in all browsers. Thanks to all participants here!
Disclaimer: Any information you find on this site should not be considered medical advice. All decisions should be made with the consent of your doctor, otherwise you are at your own risk.

Post Reply