• Post Reply Bookmark Topic Watch Topic
  • New Topic
permaculture forums growies critters building homesteading energy monies kitchen purity ungarbage community wilderness fiber arts art permaculture artisans regional education skip experiences global resources cider press projects digital market permies.com pie forums private forums all forums
this forum made possible by our volunteer staff, including ...
master stewards:
  • Anne Miller
  • Pearl Sutton
  • r ranson
stewards:
  • Leigh Tate
  • paul wheaton
  • Nicole Alderman
master gardeners:
  • Carla Burke
  • Beau Davidson
  • Jay Angler
  • John F Dean
  • Nancy Reading
gardeners:
  • thomas rubino
  • Casie Becker
  • Mike Barkley

advert warning

 
Posts: 194
5
2
  • Likes 2
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
When I clicked on the "ad" at the top of Permies home page, accessed directly from an email Permies sent to me I got the following warning from my Virus Protection Program. Just thought I would/should let you know.

My apologies if this isn't the right place to post this, didn't know where to send it. Paul seems to like this thread rather getting another email for these kinds of issues.

Terry

Suspicious page blocked for your protection
https://www.stoves2.com/
Your connection to this web page is not safe due to an unmatching security certificate.
This means that the certificate was issued for a different web address than the one it is being used for, and you run the risk of exposing your data by accessing this page.
 
master steward & author
Posts: 27192
Location: Left Coast Canada
8737
4
books chicken cooking fiber arts sheep writing
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Thanks, I'm getting something like that too.  I've sent up the bat signal.

Pro tip: If you start a new thread in the tinkering forum (instead of posting to an existing thread), it will send an email to all the senior staff.
 
gardener
Posts: 1482
Location: western NY (Erie County), USA; zone 6a.
310
hugelkultur monies cat forest garden tiny house books wofati bike medical herbs writing ungarbage
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I received the same warning in both Chrome and Safari (MacOS).
 
r ranson
master steward & author
Posts: 27192
Location: Left Coast Canada
8737
4
books chicken cooking fiber arts sheep writing
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Do we know which banner ad is causing this issue?
 
Terry Byrne
Posts: 194
5
2
  • Likes 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

r ranson wrote:Thanks, I'm getting something like that too.  I've sent up the bat signal.

Pro tip: If you start a new thread in the tinkering forum (instead of posting to an existing thread), it will send an email to all the senior staff.



Thanks very much for the Pro tip, R Ranson, now I just have to remember it. Can you send me daily reminders for the next year, then it likely will stick?

:-}
 
Terry Byrne
Posts: 194
5
2
  • Likes 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

r ranson wrote:Do we know which banner ad is causing this issue?



For my situation - Heat your home for one tenth the wood - large banner across the top not a small banner among others.

Terry
 
r ranson
master steward & author
Posts: 27192
Location: Left Coast Canada
8737
4
books chicken cooking fiber arts sheep writing
  • Likes 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Does this give you the same error?

http://www.woodburningstoves2.com/
 
r ranson
master steward & author
Posts: 27192
Location: Left Coast Canada
8737
4
books chicken cooking fiber arts sheep writing
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
And can you test this

http://www.stoves2.com/
 
r ranson
master steward & author
Posts: 27192
Location: Left Coast Canada
8737
4
books chicken cooking fiber arts sheep writing
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
This is a great mystery.  Thanks for the morning puzzle.

We can see that the https version of that site doesn't work because it's built for http.  (I don't know what that means).

If I use http I get the page.  If I use https I get the error.

example
https://www.stoves2.com - error
http://www.stoves2.com - works.

So I went to the place where the banner ads live.  Did several search things and I could find several with the http link, but I couldn't find any with the https link.  (I've passed it on to someone who understands computers incase I looked wrong)

So the question for you - is it possible your computer is trying to help by anticipating you want to go to an https link when it should be going to an http link?  And how would we test this?  
 
Terry Byrne
Posts: 194
5
2
  • Likes 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

r ranson wrote:This is a great mystery.  Thanks for the morning puzzle.

We can see that the https version of that site doesn't work because it's built for http.  (I don't know what that means).

If I use http I get the page.  If I use https I get the error.

example
https://www.stoves2.com - error
http://www.stoves2.com - works.

So I went to the place where the banner ads live.  Did several search things and I could find several with the http link, but I couldn't find any with the https link.  (I've passed it on to someone who understands computers incase I looked wrong)

So the question for you - is it possible your computer is trying to help by anticipating you want to go to an https link when it should be going to an http link?  And how would we test this?  



That is a question that is light years out of my league, R. I did both tests and they worked perfectly, I think. I did get a page both times that my VPP didn't flag so I guess I oughta trust them.

Does the big banner ad still produce VPP warnings? To my limited knowledge no <httpS> even exists, which may well be why my VPP flagged it. Had I continued I may have simply gotten a "this link does not exist" message. Don't know fer sure, ain't gonna try.

Cheers all. Thanks for the apple. I love Gala apples! Made a tiny pie. If ya wanna send me more apples I'll make a bigger pie and give you a picture of your piece.

Terry
 
Terry Byrne
Posts: 194
5
2
  • Likes 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

r ranson wrote:This is a great mystery.  Thanks for the morning puzzle.

I am pretty sure you solved it, great detective work, R!!

We can see that the https version of that site doesn't work because it's built for http.  (I don't know what that means).

If I use http I get the page.  If I use https I get the error.

example
https://www.stoves2.com - error

I clicked on the above link, the dastardly extra S one, and got the same warning from my VPP. Way to go, Sherlock Ranson!!!

 
Posts: 13
Location: Zone 6a
7
  • Likes 2
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Skip this unless you want to know more about httpS vs. http web pages

Just FYI, the httpS means that your connection to the web site is Secured by encryption. This is very important if you are doing anything you don't want others to be able to see. For example, filling in a form with your credit card info.

There is a move toward making all web browser connections secure using https so at least some web browsers will default to using https. For example, if you just type somewebpage.com in the address bar, your browser will automatically try to go to https://somewebpage.com where it used to go to http://somewebpage.com.

In this specific case, the real content is at http://www.stoves2.com (which then points to http://www.woodburningstoves2.com). The weirdness happens because there is also an httpS://www.stoves2.com. The problem is with the security of the https page.  In order to prove the connection is secure, the web page needs the right credentials (called a certificate) which must be purchased from a known legit source. https://www.stoves2.com has a security certificate, but they created it themselves rather than purchasing it from a known source. This means the connection is encrypted and cannot be eavesdropped by anyone but it does not provide any assurance that the web site is who it claims to be, hence the warning of an insecure site.

 
Terry Byrne
Posts: 194
5
2
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

M Rives wrote:Skip this unless you want to know more about httpS vs. http web pages

As Artie Johnson used to say, "Verrrrrry interesting!" but he was being sarcastic whereas I am not. This is very interesting. And obviously I was flat out WRONG about there not being any https web pages or is that webpages?


Just FYI, the httpS means that your connection to the web site is Secured by encryption. This is very important if you are doing anything you don't want others to be able to see. For example, filling in a form with your credit card info.

There is a move toward making all web browser connections secure using https so at least some web browsers will default to using https. For example, if you just type somewebpage.com in the address bar, your browser will automatically try to go to https://somewebpage.com where it used to go to http://somewebpage.com.

In this specific case, the real content is at http://www.stoves2.com (which then points to http://www.woodburningstoves2.com). The weirdness happens because there is also an httpS://www.stoves2.com. The problem is with the security of the https page.  In order to prove the connection is secure, the web page needs the right credentials (called a certificate) which must be purchased from a known legit source. https://www.stoves2.com has a security certificate, but they created it themselves rather than purchasing it from a known source. This means the connection is encrypted and cannot be eavesdropped by anyone but it does not provide any assurance that the web site is who it claims to be, hence the warning of an insecure site.



Does this mean that the Web is going to be increasingly monetized, ie. somebodies somewheres are going to charge a fee to encrypt pages/websites even?
 
M Rives
Posts: 13
Location: Zone 6a
7
  • Likes 2
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

Terry Byrne wrote:
Does this mean that the Web is going to be increasingly monetized, ie. somebodies somewheres are going to charge a fee to encrypt pages/websites even?



Hi Terry, yes, I suspect that the Web will be monetized in every possibly imaginable way

There are an untold number of companies that sell web hosting. You create the content and they provide a web server to host it so anyone can view it. You also need a domain name like somewebpage.com that must be registered and linked to your physical server so people can find your web page. A domain registrar will charge you for this domain name or the hosting provider will be happy to handle it and pass the cost along. The security certificates are sold as an add-on to the hosting service by many of these companies. For example, my web host provides a free certificate for the first year of hosting then sells a renewal each year after that. This is on top of the domain name registration fee that is usually charged annually. They will also let you pay to keep your personal info at the registrar private so you don't get a ton of spam about search engine optimization, web page design, marketing, etc. All of this is relatively low cost but it can add up over time.

Always keep in mind, when it comes to the Internet if you didn't pay for the product, you ARE the product.
 
No, tomorrow we rule the world! With this tiny ad:
177 hours of video: the 2017 Permaculture Design Course and Appropriate Technology Course
https://permies.com/wiki/65386/hours-video-Permaculture-Design-Technology
reply
    Bookmark Topic Watch Topic
  • New Topic