BeepStreet Forum Security
@giku Sometimes, when I try to connect to this forum using iPadOS Chrome or iCabMobile, I get this error
I'm posting this in Safari, which displays the intimidating "Not Secure" with the URL.
This is a new problem, and it seems to be intermittent. I has worked at various times today. Can this be corrected?
When I tap on the image links in the velocity filtering discussion, Safari cannot load them because it "cannot establish a secure connection".
Comments
The forum uses http, not https, so by definition the connection isn't secure. IMO this is only a problem if one uses the same password for the forum that they use for other accounts such as email. Sadly, people often do use the same password everywhere. That is very, very bad juju even with an encrypted (https) connection but seriously bad on a non encrypted site (http).
I don't know why you're getting this notification though. I've never seen that.
If you're on iOS 14, maybe there are security enhancements over 13.7. Why it would be intermittent is a real mystery.
I'm on iPadOS 14.4.2. This only began today, or maybe yesterday. I believe the forum uses https for certain transactions, possibly including the login exchange. Certainly the image links are https.
Edit: I posted this in Safari because Chrome wasn't working. This edit is from Chrome, working normally. I've been on the forum for a year, and never experienced this.
@number37 Which browser are you using to access the forum?
I've been having some SSL issues as well in the past few days.
You're right about sign-in being over https. Thanks for the correction. That is a good thing.
I use Safari only. I've been using mostly the Mac lately on this forum, so I'm not a good data point.
on And off security issue for me too
I never had this on any of my machines or iDevices but none of them is on iOS14.
I had a few isolated availability issues a few times though (server unavailable, got a polish error message from the server) during the past weeks.
Since iOS 14 has had so many issues already, I wouldn't be surprised if this was yet another one to add to the list. Security issues shouldn't be completely blocking without a choice.
Edit & @giku It seems like some of the document images are linked over http. Safari has an option to automatically request such links over https anyway but it might not be enabled in all cases?
Check this thread to find half of the images linked over http (just mouse over each image & see the link):
https://forum.beepstreet.com/discussion/1317/help-me-filter-out-midi-notes-based-on-velocity
Funny enough, it only seems to be the case with the images uploaded by @uncleDave...
Err... Not only me, also @Gravitas in the same thread. That's why I mentioned it.
This is a new issue, in the last day or two, while iPadOS 14.4 has been stable for months. And it's intermittent; working right now, but could go out at any time. I believe there's some glitch happening at the server.
@uncleDave What I meant to say is that your uploaded screenshots are linked to over http while Gravitas' screenshots are linked to over https.
Check. That is odd.
Hm the url to this thread is for me under ssl
its https
when I log out everything is https too
:)
Have you had any problems accessing the site? Which iOS version, which browser?
No problems at all
not on iOS not on mac
sounds like it’s a browser specific thing ...
Mine wasn't browser specific, happened on all devices/browsers on my home network. It seemed like maybe a dns issue but not sure.
Anyhow I havent had ssl issues in over a day now.
Maybe it was something with your isp
Quite possibly, but literally only impacted beepstreet (and i work all day on my computer). Maybe something weird happened with the ssl cert registration that took a while to trickle down and fix itself.
Yep had similar issues in all devices and multiple browsers.