Site not secure, per Chrome

Post by **Linna Heartbooger** » Fri Aug 07, 2020 2:47 am

^ What WF said!!

Vain wrote:Urgh! I got guilt-tripped by Avatar into lifting my lazy butt and getting things sorted so voila....the site is now secure!

The disk space was also used up - thanks to the 3Gb error log file! So it should theoretically work better now....

Woah, glad you caught that!

And THANK you for updating it to https, Vain!
(and thanks for guilt-tripping, Av)

I was chatting with a new acquaintance online, sent him here to show him something.
I was all prepared to tell him, "btw, if you get an error message, don't worry; it's just b/c the site doesn't have https" when...
...lo and behold, I tested it myself on a whim and it DID have https!

It's snaaaazzzzzy!

Post by **aliantha** » Thu Aug 13, 2020 4:29 am

Welp, I retired, and I moved to Santa Fe, and now I have CenturyLink as my ISP, and I have now gotten a "NONE SHALL PASS" message from them that McAfee has listed the ihugny domain as malicious twice. And I've only been here for a few minutes. :\

Wish there was a way to disable that bloody warning or whitelist the Watch or something. Ugh.

Post by **Avatar** » Fri Aug 14, 2020 7:20 am

Well hell, just wander in huh?

You should be able to whitelist it. (Or disable it, but that would disable for everywhere probably.) Don't think we can get them to remove it, since I suspect other (sub)domains on this server may have at some time been a bit dubious.

Will ask Vain.

--A

Post by **aliantha** » Sun Aug 23, 2020 12:17 am

Avatar wrote:Well hell, just wander in huh?

You should be able to whitelist it. (Or disable it, but that would disable for everywhere probably.) Don't think we can get them to remove it, since I suspect other (sub)domains on this server may have at some time been a bit dubious.

Will ask Vain.

--A

I thought I'd stop by, yeah.

This ISP has this McAfee Secure Wifi thing built into their platform. If you're a customer, you get it whether you want it or not. I definitely don't; it's causing other problems for me. I called to get them to disable it and they deflected me by saying my service was slower than I was paying for, so they'd send out a tech. Well, the tech has come and gone, and presumably the speed issue is fixed, but of course that didn't fix my access issue because the problem is McAfee.

I could ask them to whitelist the Watch, but I'm guessing (based on what happened when I had the same issue at the office) that when McAfee updates, we'll get blacklisted again. No, the answer is to get the ISP to take this bloody thing off my service. If I wanted McAfee, I'd *have* McAfee and not AVG - which btw I can't get to update because (I'm pretty sure) their bloody McAfee virus thingum is blocking it.

I guess I get to call them again this week. Joy.

Post by **Avatar** » Mon Aug 24, 2020 11:54 am

--A

Post by **aliantha** » Tue Aug 25, 2020 10:18 pm

Update: YAY! I just spent about 12 quality minutes on the phone with CenturyLink (5 minutes of which consisted of wading through their voicemail prompts

) and convinced the tech I spoke with to remove McAfee from my modem. Got to the Watch just fine just now, and Daz Install Manager is updating as we speak.

Post by **Avatar** » Wed Aug 26, 2020 7:24 am

Cool.

Weird, never seen something like that built into the modem itself.

--A

Post by **StevieG** » Mon Aug 31, 2020 6:43 am

So in theory there are no excuses now Ali?

Post by **Skyweir** » Mon Aug 31, 2020 8:34 am

Post by **Avatar** » Wed Sep 02, 2020 7:49 am

Good point StevieG, good point.

--A

Post by **StevieG** » Wed Sep 02, 2020 8:54 am

Sometimes I just do your work for you

Post by **Skyweir** » Wed Sep 02, 2020 9:39 am

Post by **Avatar** » Wed Sep 02, 2020 1:35 pm

At least somebody is doing it...

--A

Post by **Lazy Luke** » Thu Sep 03, 2020 2:01 pm

Skyweir wrote:

Post by **wayfriend** » Fri Sep 04, 2020 12:28 pm

Lazy Luke wrote:
Skyweir wrote:

Post by **Lazy Luke** » Fri Sep 04, 2020 12:59 pm

Avatar wrote:At least somebody is doing it...

--A

Post by **Skyweir** » Fri Sep 04, 2020 2:51 pm

wayfriend wrote:
Lazy Luke wrote:
Skyweir wrote:

Post by **wayfriend** » Tue Dec 15, 2020 1:09 pm

Not sure if this is happening for anyone else, but Chrome is displaying this whenever I log in to kevinswatch.

As far as I can make out, this happens because somewhere http is used instead of https.

Post by **wayfriend** » Tue Dec 15, 2020 1:23 pm

Some info is here: https://bugs.chromium.org/p/chromium/is ... id=1158169
It's new with Chrome 86. It may be a while before people hit it, depending on how fast they upgrade.

It seems that the issue is that the login.php response contains a Location header which indicates http.

Of course, I have no idea how to translate that into something you can do in php. Maybe someone does tho.

Code: Select all

HTTP/1.1 302 Moved Temporarily
Date: Tue, 15 Dec 2020 13:16:01 GMT
Server: Apache
Set-Cookie: kwatch_data=[blackedout]; expires=Wed, 15-Dec-2021 13:16:01 GMT; path=/phpBB2; domain=kevinswatch.ihugny.com
Set-Cookie: kwatch_sid=[blackedout]; path=/phpBB2; domain=kevinswatch.ihugny.com
Location: http://kevinswatch.ihugny.com/phpBB2/index.php?sid=[blackedout]
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

Kevin's Watch

Kevin's Watch

Site not secure, per Chrome