Large format photography forum

Status
Not open for further replies.

lecarp

Subscriber
Joined
May 8, 2009
Messages
326
Format
8x10 Format
I just noticed a warning when preparing to log onto the LLF that the site is not secure, did not put in my password. Anyone noticed this or have information about the problem?

p.s. I am on a Mac.
 
Last edited:

Doremus Scudder

Member
Joined
Sep 10, 2002
Messages
3,590
Location
Eugene, Oregon
Format
4x5 Format
Firefox and other browsers will let you know that this site is not secure for log-in. If you are concerned about a password being stolen and used elsewhere, then you need to have a password specifically for this site. Then, if it's stolen, they'll only be able to access your Photrio account. That's what I've done.

Maybe one of the moderators will post here with more specific information.

Best,

Doremus
 

mrosenlof

Member
Joined
Feb 25, 2010
Messages
621
Location
Colorado
Format
Multi Format
I'm pretty sure that LFF hasn't actually changed, it's just that newer browsers are pointing out more clearly when web pages are not secure.

I tried to load Dead Link Removed and got a certificate invalid warning, so I'm guessing the LFF admins haven't really made an effort to configure for secure connections.

probably best to use a password there that you don't also use on more important sites...
 

ced

Member
Joined
Oct 10, 2011
Messages
866
Location
Belgica
Format
Multi Format
Yep same here with FFox browser on Mac one is confronted with see attached.
 

Oren Grad

Member
Joined
Feb 17, 2005
Messages
1,619
Format
Large Format
We had a discussion on this about a year ago in our Feedback subforum. As our technical guru, Tom Westbrook, pointed out at the time, an SSL certificate would be a recurring cost for us, and as a non-commercial site we are running on donated resources and time and have no regular income stream. I'll add that it would be another item for Tom to deal with. We may get to it at some point, but we cannot promise whether or when.

In any case it is not good practice to use the same password across different websites.
 

Old-N-Feeble

Member
Joined
Feb 22, 2012
Messages
6,805
Location
South Texas
Format
Multi Format
I can only guess that their certificate has expired. MS (or whoever?) wants more $.
 
Last edited:

locutus

Member
Joined
Jun 9, 2009
Messages
579
Location
Finland
Format
Multi Format
Agreed, letsencrypt is fine for something like LFF. Its free but requires a certificate update every year.

Nowadays all the big browsers have the letsencrypt root CA in their bundle so this is completely hasslefree for the enduser too.
 

Oren Grad

Member
Joined
Feb 17, 2005
Messages
1,619
Format
Large Format
shashinzukuri said:
Oren - https://letsencrypt.org/

There's really no good reason not to encrypt anything that requires a signin.
Click to expand...

Thanks, I will bring this up for discussion.

Everyone: if you would like to convey that this is an ongoing concern and to make suggestions for how to address it, please feel free to raise it again as a topic in our Feedback subforum. We appreciate Sean's willingness to host the occasional question about us when there's an issue as to whether we are properly up and running, but beyond that let's not impose on his resources for detailed discussion of issues that are specific to LFPF. Also, I don't always have time to check in over here - posting us directly will assure that we are aware of any concerns as soon as possible.
 
Last edited:

MattKing

Moderator
Moderator
Joined
Apr 24, 2005
Messages
52,998
Location
Delta, BC Canada
Format
Medium Format
I'm closing this thread - there is a similar more recent (late December 2021) one in the sub-forum.
 
Status
Not open for further replies.
Menu
Log in
Register
Cookies are required to use this site. You must accept them to continue using the site. Learn more…