Horizons Unlimited - The HUBB

Horizons Unlimited - The HUBB (https://www.horizonsunlimited.com/hubb/)
-   Website Feedback (https://www.horizonsunlimited.com/hubb/website-feedback/)
-   -   Certificate issue, security (https://www.horizonsunlimited.com/hubb/website-feedback/certificate-issue-security-102312)

chris 16 Oct 2021 16:44

Certificate issue, security
 
1 Attachment(s)
I'd probably come here a lot more if my browser (Chrome on Android) wasn't persistently warning me about the lack of a security certificate and suggesting it's unsafe to visit hu dot com

See attached screenshot

Grant Johnson 16 Oct 2021 17:17

That's weird - we did get a new certificate - it happens regularly - but you should not see that.

Do you ALWAYS get that? If so, clear your cache, something's wrong. IF it happens, try another browser. AND please report it to me ASAP so I can investigate. As I said, it SHOULD NOT happen. We are as secure as it's possible to be, we take privacy and security very seriously.

chris 16 Oct 2021 17:59

Quote:

Originally Posted by Grant Johnson (Post 623367)
That's weird - we did get a new certificate - it happens regularly - but you should not see that.

Do you ALWAYS get that? If so, clear your cache, something's wrong. IF it happens, try another browser. AND please report it to me ASAP so I can investigate. As I said, it SHOULD NOT happen. We are as secure as it's possible to be, we take privacy and security very seriously.

Just cleared my browser cache. Same situation persists. I don't use any other browser than Chrome on my Android cell phone because apart from here, this situation doesn't occur.

Grant Johnson 16 Oct 2021 20:31

Well that's bizarre! I've tested on 6 different browsers, on two operating systems - correction 3 - and no issue.
Anyone else seeing this, especially consistently?

Grant Johnson 16 Oct 2021 20:35

And just a crazy thought, have you bookmarked httpS:// or just http:// ?

It SHOULD automagically redirect with no issue, but just in case something weird on chrome on android...

chris 16 Oct 2021 20:56

I don't bookmark any website. Regarding HU, I either just surf in or clicked on a link when receiving an email telling me there's a reply to a thread I've posted on previously. The situation has been like this for the past few days.

Grant Johnson 16 Oct 2021 22:46

That helps! Just a few days, or a week or more?

chris 17 Oct 2021 00:05

On and off over the last weeks, months, years. A long while ago I did inform you privately and I felt I was fobbed off with the usual try a different browser story (I recall it was on a Windows 7 machine, probably running Chrome).

I used to come to the hubb very regularly. Now, as there's so little traffic, I can catch up on what may catch my eye once a week/ whenever. The annoying security alert doesn't inspire me with much confidence, as well as having d1ck about "outwitting" it.

I don't bother mentioning it as I have to prioritise my daily tasks. I've never had that security message on any device, on any other website I've visited, ever.

Grant Johnson 17 Oct 2021 01:46

You were never fobbed off - I suggested that as a try, and if I never heard back, I would have assumed it worked. We DID have some issues a long, long time ago - it was solved.

To clarify from there - the "Security alert" is bogus - there is NO ISSUE with the certificate at this time, at least that I can find. All looks perfect, and the only other recent report was sorted. See: https://www.horizonsunlimited.com/hu...t-valid-102257
The Certificate is replaced every month automatically, as per protocol.

As noted, ALL my tests show no problem, on two computers, Win7 and Win 10, and multiple browsers on each, and iOS.

IF someone else has an issue please tell me! At this point I don't know what to do as it is not reproducible by anyone but you.

Here's what I found in my research:

Check the date and time - and time zone - is correct. Probably the number one issue. Your phone SHOULD do this automatically but it COULD be set to manual time setting.

Also does it happen only on Wi-Fi somewhere, or on cell connection only?

Is your phone OLD? See next item for more on this:

We use Let's Encrypt's Certificate, so this is related:

https://letsencrypt.org/docs/dst-roo...eptember-2021/

Also see https://www.entrepreneur.com/article/388125

And for more:

https://duckduckgo.com/?t=ffab&q=chr...tb=v1-1&ia=web

Let me know what happens PLEASE!
If you still have issues I will keep looking.

markharf 17 Oct 2021 05:00

FWIW, I had the same thing happen one (1) time recently. I’m afraid I paid no attention to the circumstances, in part because I’m traveling and therefore constantly shifting between phone, tablet and laptop on all sorts of interesting networks and connections. For that reason, a dire warning about the Horizons site not having the appropriate certificate merely seemed par for the course. I did find it interesting the way my little iPad tried so very valiantly to talk me out of connecting (“Are you sure you want to connect? Really, really sure? Because if you do connect, your whole world might come crashing down…” and more like that.), but I honestly don’t even remember what I did about it. It hasn’t happened again.

Tim Cullis 17 Oct 2021 09:16

Quote:

Originally Posted by Grant Johnson (Post 623382)
...the only other recent report was sorted. See: https://www.horizonsunlimited.com/hu...t-valid-102257
The Certificate is replaced every month automatically, as per protocol.

I can confirm the problem I encountered above was transient and hasn't happened since. My various machines are Mac OS 10 and OS 11 running Chrome.

jkrijt 17 Oct 2021 17:59

I tried www.horizonsunlimited.com on my Windows 10 PC with Microsoft Edge, Chrome, Brave and Firefox and also on my Android phone with Chrome and had no problems at all.


Could it be that a firewall, filter or whatever is blokking the certificate info ?

chris 18 Oct 2021 19:19

Quote:

Originally Posted by Grant Johnson (Post 623382)
You were never fobbed off - I suggested that as a try, and if I never heard back, I would have assumed it worked. We DID have some issues a long, long time ago - it was solved.

To clarify from there - the "Security alert" is bogus - there is NO ISSUE with the certificate at this time, at least that I can find. All looks perfect, and the only other recent report was sorted. See: https://www.horizonsunlimited.com/hu...t-valid-102257
The Certificate is replaced every month automatically, as per protocol.

As noted, ALL my tests show no problem, on two computers, Win7 and Win 10, and multiple browsers on each, and iOS.

IF someone else has an issue please tell me! At this point I don't know what to do as it is not reproducible by anyone but you.

Here's what I found in my research:

Check the date and time - and time zone - is correct. Probably the number one issue. Your phone SHOULD do this automatically but it COULD be set to manual time setting.

Also does it happen only on Wi-Fi somewhere, or on cell connection only?

Is your phone OLD? See next item for more on this:

We use Let's Encrypt's Certificate, so this is related:

https://letsencrypt.org/docs/dst-roo...eptember-2021/

Also see https://www.entrepreneur.com/article/388125

And for more:

https://duckduckgo.com/?t=ffab&q=chr...tb=v1-1&ia=web

Let me know what happens PLEASE!
If you still have issues I will keep looking.

Still intermittent problem (including right now as I write this at 20.19 in Germany. On Wi-Fi and 4g. Relatively new Samsung phone. Time supplied by network provider. Like I said before this problem only occurs for me on HU, never on any other website/forum. Sorry no time to read the links you posted.

markharf 18 Oct 2021 23:30

Just happened to me again, too: my older Powerbook running OS 10.11.6, using Safari on a hostel wifi network. The address bar says “https://horizons unlimited.com” and the alert reads “[graphic of padlock with a diagonal slash through it] This connection is not private. This website may be impersonating “www.horizonsunlimited.com” to steal your personal or financial information. You should go back to the previous page.” This is followed by a pair of buttons: “show details” and “go back.”

Grant Johnson 18 Oct 2021 23:33

Quote:

Originally Posted by markharf (Post 623433)
Just happened to me again, too: my older Powerbook running OS 10.11.6, using Safari on a hostel wifi network. The address bar says “https://horizons unlimited.com” and the alert reads “[graphic of padlock with a diagonal slash through it] This connection is not private. This website may be impersonating “www.horizonsunlimited.com” to steal your personal or financial information. You should go back to the previous page.” This is followed by a pair of buttons: “show details” and “go back.”


well "darn" or words to that effect.
hmmm....


All times are GMT +1. The time now is 16:02.


vB.Sponsors