This Is MS Multiple Sclerosis Knowledge & Support Community

I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.

This is happening with both Google Chrome and Microsoft Edge browsers.

If you click the "i" with a circle around it that is to the left of the web address:
Google Chrome says:

Your connection to this site is not secure.
You should not enter any sensitive information on this site (for example, passwords or credit cards), because it could be stolen by attackers.

...

Microsoft Edge says:

Be careful here
Your connection to this website isn't encrypted. This makes it easier for someone to steal sensitive information like passwords.

THX1138 wrote:I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.

This is happening with both Google Chrome and Microsoft Edge browsers.

Technically, ThisIsMS is not insecure, it just doesn't offer encryption.

THX1138 wrote:I just noticed this. No HTTPS in the TiMS URL even though I am running the HTTPS Everywhere program.

From the HTTPS Everywhere FAQ:

https://www.eff.org/https-everywhere/fa ... protect-me

When does HTTPS Everywhere protect me? When does it not protect me?

HTTPS Everywhere depends entirely on the security features of the individual web sites that you use; it activates those security features, but it can't create them if they don't already exist.

So what does it take to make thisisms.com secure, with the https showing in the address bar
It should look like this https://thisisms.com if the thisisms.com site is using a secure connection.

It's very common these days for websites to be secured using an encrypted connection. These sites show https at the beginning of the URL instead of http.
https indicates that the site is using a secure connection to keep communications private. It would seem desirable forthisisms.com to have a private, secure, https connection.

Check if a site's connection is secure
https://support.google.com/chrome/answer/95617?hl=en-GB

THX1138 wrote:https indicates that the site is using a secure connection to keep communications private. It would seem desirable for thisisms.com to have a private, secure, https connection.

Keep in mind that what you post to ThisIsMS is readable by anyone in the world with an internet connection (except for private messages). This is quite different from interacting with a banking or shopping site where an encrypted connection is necessary.

NHE wrote:Keep in mind that what you post to ThisIsMS is readable by anyone in the world with an internet connection (except for private messages). This is quite different from interacting with a banking or shopping site where an encrypted connection is necessary.

As NHE stated, its a PUBLIC FORUM, not a private secure financial one, this site is all about random people being able to read its contents. If you truly care about privacy, dont post anything private, dont PM anything private and/or financial, and most importantly, look into using a TOR browser. Hey, if its good enough for drug-dealers and other criminals...

Just to follow up here, we now have an SSL certificate and the site will show up as Secure in all browsers. Thanks to all participants here!