Site_Feedback

Topic   Certain pages on the site showing up as "Not Secure."

KingofGames
GameTZ Subscriber Has Written 2 Reviews
5-Nov-2018(#1)
Using Chrome Version 70.0.3538.77, I'm consistently seeing "Not Secure" under the site information portion of the browser when viewing various topics. Is this something on my end, or is the site gonna infect my work PC??


bill
GameTZ Subscriber GameTZ Full Moderator 600 Trade Quintuple Gold Good Trader Gold Global Trader (15) Has Written 26 Reviews
5-Nov-2018(#2)
Find the "Secure Site" link in the top-right. Click it, now you're using the secure version of the site.

It's not certain pages, the entire site works as http or https. But, it also doesn't force people to use the secure (https) version. I've noted some cases where forcing it isn't a great thing for certain rare cases (can hose people).

Depending on how you get to a url on the site, you can end up using the "non-secure" old http version of the site. For example, if I link a gametz page for you like so: http://gametz.com/user/bill.html (not https!) then you click it, it will work as the non-secure site. Oh noes!

Well, if you notice that, just click that "Secure Site" link in the top right (all that does it add the 's' to the http).
ryanflucas
GameTZ Subscriber 1000 Trade Quintuple Gold Good Trader
6-Nov-2018(#3)
In what cases does forcing https create an issue?
bill
GameTZ Subscriber GameTZ Full Moderator 600 Trade Quintuple Gold Good Trader Gold Global Trader (15) Has Written 26 Reviews
6-Nov-2018(#4)
Certain older browser or browsers on no longer supported devices don't have updated root certificates, thus they don't accept the certs associated with gtz's https (which I get free from Let's Encrypt a somewhat new cert provider). An example had been the browser on a ps3/4 (though, I think I heard that was fixed... but there are likely other cases too and an non-updated box would still not work as far as I know). So, if I force https, they just won't work at all (which is sad because they'd happily work fine on regular old http connections).

There was also some issue that came up when I moved the server to new hosting (thus a new IP address... perhaps related to me new using 1 IP for everything... I forget). I disabled the sticky HSTS thing (swaps you to https if you've ever used it). I think if you google "HSTS dangers" you can read more about that.


tl;dr if you see "not secure" just click the "Secure Site" link and you're good.

Topic   Certain pages on the site showing up as "Not Secure."