Changes to forum security

[admin]

As most people will be aware, as time goes on, security on the internet becomes more and more of an issue. To help keep web users safe, various organisations are encouraging site owners to switch from unencrypted content, to SSL secured content (denoted by https at the start of the web address). For a long time now, any site taking credit cards would use SSL to ensure sensitive card information couldn't be accessed by unauthorised persons. By switching to SSL throughout, all information, including usernames and passwords gains an increased level of protection against malicious attacks. This increase in protection is particularly beneficial if you access the internet over a 3rd party or public wifi connection, which pose a particular risk from "man in the middle" attacks from other users on the same network.

In order to keep up with these changes, we've now implemented SSL support on the forum. The site can still be accessed as before, using the non-SSL address http://www.genealogyforum.co.uk, or using SSL with increased security, via https://www.genealogyforum.co.uk

If you're accessing the site from a public network, we'd recommend using the new https URL, so all data transferred between your browser and our server is encrypted. If you're using a trusted home or work network, you can optionally continue to use the old http URL, or switch to the new one at your own discretion. When using the new URL, you should see a padlock in the browser address bar verifying the increased security level.

If you choose to use the new secure URL, some content which doesn't offer the same level of security may be blocked - so you may find the odd missing attachment, or embedded image missing.

When accessing via the new SSL URL, previous cookies can no longer be accessed, which may cause access issues. Before accessing the new URL, we'd recommend logging out of the forum, then clicking the "Delete all board cookies" link at the bottom right hand corner of any forum page.

SSL support should work with most current devices, but may be problematic with very old PCs and some older mobile phones or tablets. If this proves to be the case, the old non-SSL URL will continue to work for the time being, however, it's likely that at some point in the near future, security warnings in web browsers may force us to point all requests at SSL pages.

Hopefully I've managed to communicate all of that clearly! Any queries or concerns, please let me know.

[grangers14]

Thank you for the explanation and the work you have done to keep the forum as secure as you possibly can.
Jo

[mjay]

Thank you for the update and keeping us all safe it's very much appreciated the amount of work that we know you do behind the scenes.
I can log in and reply on iPad but not on my phone. On my phone I can log in but can't reply to posts and I keep being kicked back to log in stage but can see at bottom of index page I'm logged. Followed all your instruction will,keep trying on me phone.

Thanks again

[Jimmy]

Don't know what I done but managed to get in.

[admin]

On my phone I can log in but can't reply to posts and I keep being kicked back to log in stage but can see at bottom of index page I'm logged.

I've checked it on my iPhone 5 and it's OK - but I don't have access to any other handsets to check with, so it's difficult to give you any pointers. I'd suspect the phone is caching old non-secure content, or not clearing the old cookie. It would be useful to know the phone model and age for reference, in case anyone else has issues.

[Jimmy]

I got back in on my Samsung s6.

[mjay]

I have an S6 too
I have tried everything you've posted, have turned phone off and on again.
The first suggestion takes me to enter forum, can log in but can't post anything
The second suggestion takes me to a warnings page connection is not secure.
I've cleared all cookies at bottom of the index page

[grangers14]

Just a thought...are you logging in via the http or the new https? Try saving the new address and login that way?
Jo

[SRD]

I don't use a mobile phone but my browser has quick links (one up from bookmarks) which had to be changed but it's worked Ok, I'm now logging in via https.

[BC Wench]

Just a thought...are you logging in via the http or the new https? Try saving the new address and login that way?
Jo

That's exactly how I got back in Jo by clicking on the https link which Admin gave, then saving that as a new bookmark.

[mjay]

Don't know how but I've done it I'm in
Thanks all x