Changes to forum security

Main forum for discussion of Genealogy topics across the Counties and elsewhere.

Moderators: grangers14, admin, Northern Lass

Changes to forum security

Postby admin » Sun Feb 05, 2017 1:56 pm

As most people will be aware, as time goes on, security on the internet becomes more and more of an issue. To help keep web users safe, various organisations are encouraging site owners to switch from unencrypted content, to SSL secured content (denoted by https at the start of the web address). For a long time now, any site taking credit cards would use SSL to ensure sensitive card information couldn't be accessed by unauthorised persons. By switching to SSL throughout, all information, including usernames and passwords gains an increased level of protection against malicious attacks. This increase in protection is particularly beneficial if you access the internet over a 3rd party or public wifi connection, which pose a particular risk from "man in the middle" attacks from other users on the same network.

In order to keep up with these changes, we've now implemented SSL support on the forum. The site can still be accessed as before, using the non-SSL address http://www.genealogyforum.co.uk, or using SSL with increased security, via https://www.genealogyforum.co.uk

If you're accessing the site from a public network, we'd recommend using the new https URL, so all data transferred between your browser and our server is encrypted. If you're using a trusted home or work network, you can optionally continue to use the old http URL, or switch to the new one at your own discretion. When using the new URL, you should see a padlock in the browser address bar verifying the increased security level.

If you choose to use the new secure URL, some content which doesn't offer the same level of security may be blocked - so you may find the odd missing attachment, or embedded image missing.

When accessing via the new SSL URL, previous cookies can no longer be accessed, which may cause access issues. Before accessing the new URL, we'd recommend logging out of the forum, then clicking the "Delete all board cookies" link at the bottom right hand corner of any forum page.

SSL support should work with most current devices, but may be problematic with very old PCs and some older mobile phones or tablets. If this proves to be the case, the old non-SSL URL will continue to work for the time being, however, it's likely that at some point in the near future, security warnings in web browsers may force us to point all requests at SSL pages.

Hopefully I've managed to communicate all of that clearly! Any queries or concerns, please let me know.
Dominic
Genealogyforum.co.uk webmaster and administrator
admin
Site Admin
 
Posts: 81
Joined: Wed Jul 23, 2003 7:10 pm
Location: Cambridgeshire

Re: Changes to forum security

Postby grangers14 » Sun Feb 05, 2017 3:02 pm

Thank you for the explanation and the work you have done to keep the forum as secure as you possibly can.
Jo :)
User avatar
grangers14
 
Posts: 15158
Joined: Wed Jan 21, 2009 12:50 pm
Location: North East

Re: Changes to forum security

Postby mjay » Sun Feb 05, 2017 4:44 pm

Thank you for the update and keeping us all safe it's very much appreciated the amount of work that we know you do behind the scenes.
I can log in and reply on iPad but not on my phone. On my phone I can log in but can't reply to posts and I keep being kicked back to log in stage but can see at bottom of index page I'm logged. Followed all your instruction will,keep trying on me phone.

Thanks again 8)
Researching: Yates,Hunt,Brookes,Artess,Sheldon,Thornton,Hooper,Crowley,Lacy,Downes,Weaver,Artess
mjay
 
Posts: 2293
Joined: Mon May 18, 2009 6:09 pm
Location: Tipton/ Bilston

Re: Changes to forum security

Postby Jimmy » Mon Feb 06, 2017 4:41 pm

Don't know what I done but managed to get in.
Just trying to do my bit for BCC, bringing families back together.
User avatar
Jimmy
 
Posts: 22338
Joined: Wed Oct 01, 2008 8:40 am
Location: Kidderminster.

Re: Changes to forum security

Postby admin » Mon Feb 06, 2017 6:44 pm

mjay wrote:On my phone I can log in but can't reply to posts and I keep being kicked back to log in stage but can see at bottom of index page I'm logged.

I've checked it on my iPhone 5 and it's OK - but I don't have access to any other handsets to check with, so it's difficult to give you any pointers. I'd suspect the phone is caching old non-secure content, or not clearing the old cookie. It would be useful to know the phone model and age for reference, in case anyone else has issues.
Dominic
Genealogyforum.co.uk webmaster and administrator
admin
Site Admin
 
Posts: 81
Joined: Wed Jul 23, 2003 7:10 pm
Location: Cambridgeshire

Re: Changes to forum security

Postby Jimmy » Mon Feb 06, 2017 6:48 pm

I got back in on my Samsung s6.
Just trying to do my bit for BCC, bringing families back together.
User avatar
Jimmy
 
Posts: 22338
Joined: Wed Oct 01, 2008 8:40 am
Location: Kidderminster.

Re: Changes to forum security

Postby mjay » Mon Feb 06, 2017 8:38 pm

I have an S6 too
I have tried everything you've posted, have turned phone off and on again.
The first suggestion takes me to enter forum, can log in but can't post anything
The second suggestion takes me to a warnings page connection is not secure.
I've cleared all cookies at bottom of the index page
Researching: Yates,Hunt,Brookes,Artess,Sheldon,Thornton,Hooper,Crowley,Lacy,Downes,Weaver,Artess
mjay
 
Posts: 2293
Joined: Mon May 18, 2009 6:09 pm
Location: Tipton/ Bilston

Re: Changes to forum security

Postby grangers14 » Mon Feb 06, 2017 8:51 pm

Just a thought...are you logging in via the http or the new https? Try saving the new address and login that way?
Jo :)
User avatar
grangers14
 
Posts: 15158
Joined: Wed Jan 21, 2009 12:50 pm
Location: North East

Re: Changes to forum security

Postby SRD » Tue Feb 07, 2017 8:00 am

I don't use a mobile phone but my browser has quick links (one up from bookmarks) which had to be changed but it's worked Ok, I'm now logging in via https.
Currently investigating the Hillmans of Sussex.
User avatar
SRD
 
Posts: 2441
Joined: Tue Jan 04, 2011 5:34 pm
Location: Wiltshire

Re: Changes to forum security

Postby BC Wench » Tue Feb 07, 2017 12:40 pm

grangers14 wrote:Just a thought...are you logging in via the http or the new https? Try saving the new address and login that way?
Jo :)


That's exactly how I got back in Jo by clicking on the https link which Admin gave, then saving that as a new bookmark.
Researching: PARGETER, BELCHER, BRADLEY, DANDO, ROWLEY, ROWSELL
User avatar
BC Wench
 
Posts: 3218
Joined: Mon Oct 06, 2008 5:59 pm

Re: Changes to forum security

Postby mjay » Tue Feb 07, 2017 1:07 pm

Don't know how but I've done it I'm in
Thanks all x
Researching: Yates,Hunt,Brookes,Artess,Sheldon,Thornton,Hooper,Crowley,Lacy,Downes,Weaver,Artess
mjay
 
Posts: 2293
Joined: Mon May 18, 2009 6:09 pm
Location: Tipton/ Bilston


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 4 guests