Alert: Potential security risk ahead

[Krikor]

Hi there,

I hardly use firefox, but today was one of those rare days.

When trying to access the gimpchat website I received this warning:

Alert: Potential security risk ahead

Firefox detected a potential security threat and did not proceed to gimpchat.com. If you visit this site, attackers will be able to steal your information, such as passwords, email addresses and credit card details.

Know more…

AlertRisk.png (30 KiB) Viewed 15034 times

With Chrome there is no warning, nor with the AD Blocker browser.

Why does Firefox see danger on this site? something to worry about?
Does anyone else using Firefox receive a similar warning?

Thx.

[rich2005]

It is because you are using a secure hyperlink to gimpchat starting "https://...." and the site is using an invalid security certificate.

If you do not want to see that then use the form "http://.....

invalid.jpg (43.9 KiB) Viewed 15029 times

[mackenzieh]

It is because you are using a secure hyperlink to gimpchat starting "https://...." and the site is using an invalid security certificate.

If you do not want to see that then use the form "http://.....

invalid.jpg

I use Microsoft Edge and I get the triangle with an exclamation point in the middle and not secure next to it. The site works. For me, it doesn't accept "http://

[Krikor]

It is because you are using a secure hyperlink to gimpchat starting "https://...." and the site is using an invalid security certificate.

If you do not want to see that then use the form "http://.....

invalid.jpg

Salut rich2005,

When searching the site using the gimpchat search and not typing the url, this is the page that appears.

In fact when using http (instead of https) the scary screen doesn't manifest itself. A good option when creating a shortcut to this forum.

But what about the security issue? Would that invalid security certificate be something so trivial, superfluous?

I imagine that many users have stopped visiting and known this forum due to bumping into warnings like those mentioned in post #1.

Merci!

[rich2005]

No real need for it, there are free certificate issuing authorities. Gimpchat uses a self signed certificate that expires in 2042. Not acceptable to web browsers these days.
..but then it depends on the web site and the degree of risk. Am I bothered if my password is stolen here, not very, it is not used elsewhere

firefox.jpg (136.42 KiB) Viewed 14936 times

Some reading for you
https://bytebitebit.com/1124/disable-in ... e-warning/
https://www.globalsign.com/en/blog/how- ... te-details

[Krikor]

No real need for it, there are free certificate issuing authorities. Gimpchat uses a self signed certificate that expires in 2042. Not acceptable to web browsers these days.
..but then it depends on the web site and the degree of risk. Am I bothered if my password is stolen here, not very, it is not used elsewhere

Some reading for you
https://bytebitebit.com/1124/disable-in ... e-warning/
https://www.globalsign.com/en/blog/how- ... te-details

Of the concerns this is one of the smallest.
Or the Forum Admin would help with account recovery; thus maintaining the same username, or we could always create a new account, without any loss other than the username.

I read both pages. It was good to learn more about this subject and how to consult the information available on the lock.

I didn't even know about the existence of TLS, I was still in the SSL era :-)

Thx rich2005!