General Category > General Discussion

Secured Weather Sites

(1/3) > >>

Randall75:
Does anyone here have their weather site set up as secured?
Godaddy contacted me to day to see if I wanted to upgrade mine to https.
That with the new updates coming some people may not be able to view my site with the updates like Chrome.
Do we really need to do that?

Thanks

cheers

Blicj11:
Randall:

I know that several of us have switched to a secure site, including Reinhard and me. We really shouldn't have to do it, because we aren't collecting viewer information. The reason I did it is because browsers are now warning people that they are viewing an "unsafe" or an "unsecured" site and this will worry the folks who don't realize it's ok to view an unsecured weather page. Switching to https is just reassuring the casual viewer that he or she doesn't have to worry about all that in the first place. It's not a very complicated change, but you do have to pay a modest annual fee for a secure certificate. There are providers that will give you one for free, but you have to renew them every month or 90 days, rather than annually. GoDaddy would handle all that for you. I am curious as to what they are proposing to charge you for making the switch. The most recent release of Mark's SteelSeries Gauges, which I know you have on your website, makes the switch to https easy as far as the Gauges are concerned.

That's my 2? worth. Let us know how it turns out if you proceed, etc.

Here in northern Utah we are about to choke to death from the ash and smoke raining down from these very close wildfires so I trust your air smells a lot better than ours.

xairbusdriver:
In another part of web site upkeep, Google has become their indexing and ranking mobile designated sites first. If you build a responsive design, it shouldn't make any difference. If the site doesn't work well on small screens, your ranking will probably be lowered.

As for https, I've noticed that some domain and web providers are slowly moving to all the free certificate providers to be used and will do the updating for you automatically. You will usually pay for this "service" which is supposed to be fairly simple. I'm dragging my feet on the matter as I have so few visitors. However, Hosgator is now offering a free "https" service that automatically renews every 90 days. I might take them up on that even though I plan on moving to another web host when my current arrangement expires.

So far, no browsers are blocking viewers from plain http sites, they are simply showing different colored "favocons" or images on non-SSL sites.

elagache:
Dear Randall, Blick, X-Air, and WeatherCat web spinners,


--- Quote from: Randall75 on September 19, 2018, 05:51:21 PM ---Does anyone here have their weather site set up as secured?
--- End quote ---

My website is badly neglected as it is, but I'm certainly not going to bother with upgrading it to secure http.  As far as I'm concerned, Google and other companies are spinning some mass hysteria by marking websites as "not secure."  They web crawlers can determine if the website is capable of collecting any information from the user or not.  A website that only provides information for visitors should - not - be https.  It is simply wasting computing power for absolutely no benefit.


--- Quote from: Blicj11 on September 19, 2018, 08:16:01 PM ---Here in northern Utah we are about to choke to death from the ash and smoke raining down from these very close wildfires so I trust your air smells a lot better than ours.
--- End quote ---

Not to hijack Randall's thread, but sorry you have such bad air quality.  At the moment California is in better shape, but we are fast approaching the "Santa Ana" season when the wildfires might come back with a vengeance.

Cheers, Edouard  [cheers1]

xairbusdriver:
Was searching for more SSL info today and came across https://www.whynopadlock.com//. Just for grins, I plugged in my Wx site and up came a report saying it was 'secured' with a valid certificate! Further sleuthing revealed that Hosgator had "completed installing certificates for all domains" back in the Summer of last year. It's a LetsEncrypt cert but it doesn't expire until the end of July this year.

Went to HG and saw that my primary domain was show as having a cert, but not the Wx site. Chatted with Support and the fixed that.

I still need to confirm that it is automatically renewed by HG or if it was a one-time, one year deal. I didn't think about that while chatting. [blush] I have not modified any links on this or the other site they host, but I think all my on-site links are relative. Hope this is not the beginning of a royal mess!

My updated report from Why No Padlock has this note:
--- Quote ---You currently have TLSv1 enabled.
This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018.
--- End quote ---
That may be a function of the 'free' cert.

Bottom line, you might want to check your hosting service and discover that they may have 'given' you something useful and potentially free. Or empty your browser caches and type in "https" in front of your domain name. ::)

...Perhaps that's why my Banner has disappeared? [blush]

Yep, I've stepped into a pile of it!!!! [banghead]

Navigation

[0] Message Index

[#] Next page