NoteWorthy Composer Forum

Forums => General Discussion => Topic started by: Flurmy on 2016-03-21 08:46 pm

Title: Trustworthy
Post by: Flurmy on 2016-03-21 08:46 pm
Firefox says: "this connection is not trustworthy"  :D
What's up?
Title: Re: Trustworthy
Post by: William Ashworth on 2016-03-21 11:29 pm
I'm getting the same thing from Chrome. I got here by going through the NWC website; Chrome wouldn't let me in when I used the shortcut in my bookmarks. Said that the connection was not secure and the server couldn't prove it owned the site's certificate. Something screwy is going on.
Title: Re: Trustworthy
Post by: Warren Porter on 2016-03-22 11:12 am
Just converted to Windows 10.  Firefox won't let me in directly, I have to choose forum from the main website.  Also had certificate problem.
Title: Re: Trustworthy
Post by: Flurmy on 2016-03-22 12:47 pm
Quote
forum.noteworthysoftware.com utilizes an invalid security certificate

The certificate is valid only for the following names:
  www.noteworthysoftware.com, noteworthysoftware.com 

(Error code: ssl_error_bad_cert_domain)
Title: Re: Trustworthy
Post by: William Ashworth on 2016-03-22 04:04 pm
Here's what Chrome gives me:

Quote
Your connection is not private

Attackers might be trying to steal your information from forum.noteworthysoftware.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_COMMON_NAME_INVALID
....
This server could not prove that it is forum.noteworthysoftware.com; its security certificate is from www.noteworthysoftware.com. This may be caused by a misconfiguration or an attacker intercepting your connection.
Title: Re: Trustworthy
Post by: NoteWorthy Online on 2016-03-22 10:27 pm
How are you landing onto the forum? The forum should be accessed exclusively via:

https://forum.noteworthycomposer.com

If you are using a noteworthysoftware.com address, you should stop using it and visit the above link directly.

If there is a broken link somewhere that points to the old forum locations, please reply here with details.
Title: Re: Trustworthy
Post by: William Ashworth on 2016-03-23 05:48 am
We-l-l-l-l.....

I have been, in fact, using a link that uses the noteworthysoftware.com address. It's the bookmark in my browser. I suspect many others are in the same state. I can and will change it. But you might reactivate the certificate on the noteworthysoftware.com address at least long enough to let people know they have to change their bookmarks. You are likely to lose a few forum readers who are less computer-savvy than Flurmy and Warren and I.
Title: Re: Trustworthy
Post by: Warren Porter on 2016-03-23 10:47 am
Attached is what I've been getting. The only difference between the suggested link and what a mouseover on my frequently visited bar shows is a trailing slash (/).
Title: Re: Trustworthy
Post by: Mike Shawaluk on 2016-03-23 01:04 pm
A little over a year ago, it was announced that the various NWC web resources were being moved to the noteworthycomposer.com domain. (The announcement is here (https://forum.noteworthycomposer.com/?topic=9062.0)). After that migration, redirects were put in place to automatically send visitors to the new sites if they had previously bookmarked the older noteworthysoftware.com URLs.  Unfortunately, this made the changeover fairly transparent, and apparently a number of people never bothered changing their bookmarks/favorites.

The solution to the problem is for people to update their forum bookmarks to point to the new domain. People who bookmarked https://www.noteworthysoftware.com or https://noteworthysoftware.com should be correctly redirected to the new main site.
Title: Re: Trustworthy
Post by: NoteWorthy Online on 2016-03-23 02:13 pm
Now I understand the issue better. The browser is claiming that the server is wrongly configured, when in fact, this was an intentional configuration change on my part. It was intended to make it easier to find the correct forum link (by overriding the security check). Since we no longer fully support the old, retired domain, I will change the config so that the old domain is not served up at all.

When this change was first made, we should have created landing pages on forum.noteworthysoftware.com that included instructions to update your address book, rather than simply redirecting straight to the new URL. Something to remember for next time, should this situation arise again.

Title: Re: Trustworthy
Post by: William Ashworth on 2016-03-23 06:27 pm
One concern, Eric: you might consider keeping the old domain name registered for a while. The situation is otherwise ripe for phishers.
Title: Re: Trustworthy
Post by: Mike Shawaluk on 2016-03-23 07:35 pm
One concern, Eric: you might consider keeping the old domain name registered for a while. The situation is otherwise ripe for phishers.
The noteworthysoftware.com domain is still registered to Eric until March of 2018. I think the issue in this case was the HTTPS certificate for the website.
Title: Re: Trustworthy
Post by: Flurmy on 2016-03-23 09:51 pm
Yes, right: my bookmark pointed to https://forum.noteworthysoftware.com/
And I found a note of mine which says:
Quote
https://www.noteworthysoftware.com/forum (obsolete)

I was sure I changed it to https, and indeed I did. But I forgot to update the rest!  :-[

Sorry (but I'm not the only one, it seems...)
Title: Re: Trustworthy
Post by: William Ashworth on 2016-03-23 10:06 pm
The noteworthysoftware.com domain is still registered to Eric until March of 2018. I think the issue in this case was the HTTPS certificate for the website.
I agree about the certificate being the issue - that's what Chrome told me in the first place. And I'm glad the domain is safe for another two years.