Web site security

Discussion in 'Shiny Things' started by MrBob, Nov 6, 2018.

  1. MrBob

    MrBob Long timer Supporter

    Joined:
    Oct 27, 2005
    Oddometer:
    15,926
    Location:
    Boulder county, Colorado
    This is a question for web gurus.
    I have two web sites for my businesses. I refer customers to them almost daily. When I pull up the URLs on Google the header says the sites are not secure. What is going on with this and how do I fix it?
    #1
  2. MacNoob

    MacNoob piney fresh

    Joined:
    Jun 2, 2010
    Oddometer:
    2,491
    Location:
    The mosquito-y Center of Canada
    You need a site certificate from someone like Verisign installed and HTTPS protocol port 443 enabled on your web servers to start.
    #2
  3. MrBob

    MrBob Long timer Supporter

    Joined:
    Oct 27, 2005
    Oddometer:
    15,926
    Location:
    Boulder county, Colorado
    Right. :dunno Sounds like I need to hire someone to do this?
    #3
  4. MacNoob

    MacNoob piney fresh

    Joined:
    Jun 2, 2010
    Oddometer:
    2,491
    Location:
    The mosquito-y Center of Canada
    Whoever set up your web servers should be able to do that. There is a cost for tthe site certificate from Verisign or Thawte or whoever issues it. I'm not a web guy so I can't offer too much help.
    #4
  5. Ray916MN

    Ray916MN Dim Mak

    Joined:
    Apr 23, 2011
    Oddometer:
    414
    Location:
    Orono, MN
    If the sites are strictly informational they don't need to be secured. If you are selling things online through the sites, they need to be secured. If you collect significant personal information from visitors (eg. SS#, DL#) you want the site to be secured. Security is ensuring that the information between your site and the visitor is encrypted.
    #5
    9Realms likes this.
  6. MrBob

    MrBob Long timer Supporter

    Joined:
    Oct 27, 2005
    Oddometer:
    15,926
    Location:
    Boulder county, Colorado
    "
    That makes sense to me. But, it's the "This site is not secure message" in the web site headers that could be hurting my business. That needs to go away.
    #6
  7. motokeith

    motokeith Been here awhile

    Joined:
    Mar 29, 2012
    Oddometer:
    632
    Location:
    Falcon, CO
    Check with your hosting service as some offer SSL encryption under the blanket of their own certificates. My host does at no additional cost.
    #7
    Eddieb and MrBob like this.
  8. telejojo

    telejojo Long timer

    Joined:
    Feb 2, 2010
    Oddometer:
    1,042
    Location:
    Huntsville Ala. foothills of the Smokey's
    I get the same thing sometimes to this site. It will say not safe and I have to reboot to get it to work.
    #8
  9. MrBob

    MrBob Long timer Supporter

    Joined:
    Oct 27, 2005
    Oddometer:
    15,926
    Location:
    Boulder county, Colorado
    I live chatted with my host, Hostgator. The tech said something about forcing HTTP into my domain, which she did, and now all is good.
    Thanks all for the input.
    #9
    Chaostrophy likes this.
  10. Grinder

    Grinder Wrong way 'round

    Joined:
    Sep 7, 2006
    Oddometer:
    2,964
    Location:
    In DC traffic...
    Probably a https redirect.
    #10
  11. MrBob

    MrBob Long timer Supporter

    Joined:
    Oct 27, 2005
    Oddometer:
    15,926
    Location:
    Boulder county, Colorado
    I built one of the web pages myself, using Wordpress and Youtube vids, but this part is a little beyond me.
    #11
  12. shores

    shores ElBandido

    Joined:
    Jun 19, 2010
    Oddometer:
    2,804
    If it was defaulting to https or default is to redirect to https which is common on newer software versions of iis or Apache than yes tiu have to disable https redirect whixh it sounds like they did, or get a certificate.
    I'd you didnt pay for one it will be using a self signed certificate message ing it generated it's own and hasnt been verified by a third party that's why you get the potential security risk warning
    #12
  13. Chaostrophy

    Chaostrophy Been here awhile

    Joined:
    Oct 24, 2017
    Oddometer:
    379
    Location:
    US
    They are trying to get everyone to use SSL, Let's Encrypt will get you an SSL certificate for free.

    Sent from my Nexus 6P using Tapatalk
    #13
  14. Bodwick

    Bodwick Odd Bod

    Joined:
    Jan 28, 2003
    Oddometer:
    1,778
    Location:
    Cloud Cuckoo Land U.K.
    Post a couple of links...
    #14
  15. UngaWunga

    UngaWunga Mosquito bait

    Joined:
    Jan 7, 2005
    Oddometer:
    11,125
    Location:
    NH
    Yes
    #15