Motoscrubs site reported as "Not Secure"

[JimF]

I believe our site is frequently cautioned to be "not secure" or "unsafe" because we have a ".com" web address (commerce) and we lack an SSL certificate (https).

It would have been better had I registered the site at its inception as a ".org" domain (organization) or something similar. Hindsight of course is 20-20. An SSL certificate incurs an annual fee, so adding that fee to the annual domain cost is an extra financial expenditure I don't care to fund.

The fact is this site sells nothing and charges nothing to be member. No commerce is enacted on this website. If anyone solicits you purporting to be collecting donations toward the maintenance of this website, DO NOT SEND MONEY.

Also, your private email addresses are neither sold nor given to anyone ever. Whatever spam emails you get, rest assured the spammers did not get your information from this site.

[IanHood]

Jim,

Shared SSL certificates (which is all you need) are available free from most hosting providers. A quick bit of jiggery pokery reveals that Motoscrubs is hosted by one of the hosting brands owned by https://netnation.com/ which are listed below. I've checked and they all seem to offer shared SSL certificates for all versions of their hosting plans. Typically those shared SSL certificates can be installed automatically, either via the user's configuration panel and or with a little help from the support team.

Regards,

Ian (who, as well as owning 3 Ducatis, is also a bit of a nerd)

https://hostway.com/
https://www.hostmysite.com/
https://myhosting.com/
https://www.gate.com/
https://www.solvps.com/
https://domainpeople.com/

[JimF]

Thanks Ian!

I will pursue the shared certificate.

Jim

[IanHood]

My pleasure Jim. Let me know if you need any help with it.

Ian

[IanHood]

FYI, if you let me know which host you use, I can probably provide more exact guidance.

[themoudie]

At present I have being having intermittent problems, with Firefox browser not allowing me to log in, so that I can post on the forum.

This is the message that I have been receiving!

Error code: SSL_ERROR_RX_RECORD_TOO_LONG

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the web site owners to inform them of this problem.

Any ideas, or assistance either to me, not that I can do anything about it I suspect, or JimF, please! It is getting to be tedious and vexing.

Thank you and good health, BillR

[IanHood]

Bill,

This is because the motoscrubs site has no ‘SSL certificate’ installed which is what makes websites more secure. When installed, the URL starts ‘https’ rather than ‘http’. Firefox is detecting this and try to protect you from what it sees as a potentially malicious site (even though we know that is not the case. It is possible to override the protection in Firefox by changing specific settings but that would remove protection from actual malicious sites. The ideal solution would be for Jim to install an SSL certificate on the site.

You could use the Chrome browser to access the site which, from memory, allows you to manually override the protection on a per site basis.

Ian

[themoudie]

Aye Ian,

Thank you for your informative reply.

I understood from the previous correspondence in this thread about the 'SSL certificate' and realise that Firefox likely changed their algorithms/code to make their software more secure than previous versions.

However, as you can see Google Chrome has allowed me to 'Login' and post, thank you very much.

Off to try mounting a trigger coil in the 125H casing, finish cleaning a 350 MKIII head and taking the 450 for a canter later, when things cool down a bit.

Good health, BillR

[IanHood]

My pleasure Bill, enjoy the tinkering and the ride.

Ian