Certificate Expired

[blackgothicdoll]

The site certificate expired yesterday. People will get warnings if their browsers are configured to do so, or not be able to access the site at all.

[Sarahlabyrinth]

Does that mean LHC won't exist any more?

[blackgothicdoll]

Does that mean LHC won't exist any more?

Lol no! The certificate is signed so that browsers can trust it and send data encrypted, to protect information. An expired certificate means that browsers won't trust it, but the site can still be visited (though some people's browsers will not let them bypass a security warning, these are the people who won't be able to access the site).

All they have to do is renew the certificate and everything will be same as usual. It looks like this is only an issue on longhaircommunity.com, forums.longhaircommunity has no problem.

[Sarahlabyrinth]

Lol no! The certificate is signed so that browsers can trust it and send data encrypted, to protect information. An expired certificate means that browsers won't trust it, but the site can still be visited (though some people's browsers will not let them bypass a security warning, these are the people who won't be able to access the site).

All they have to do is renew the certificate and everything will be same as usual. It looks like this is only an issue on longhaircommunity.com, forums.longhaircommunity has no problem.

Oh, thank goodness! Lol! I haven't had any trouble accessing the forum the last couple of days.

[eresh]

Yep, read my topic ;-)

[eadwine]

https://i.imgur.com/9vbTg2Y.jpg

[eadwine]

Not expired yet ;)

https://i.imgur.com/9vbTg2Y.jpg

[Hairkay]

I had trouble accessing this site today. My protection is making it hard to get here now.

[lapushka]

Can we at least get some re-assurance that someone is working on this? :)

[blackgothicdoll]

Not expired yet ;)

https://i.imgur.com/9vbTg2Y.jpg

Read my above post, I called out which domain has an expired certificate. I mentioned that forums.longhaircommunity does not. :)

[blackgothicdoll]

Yep, read my topic ;-)

The issue you described is of a different cause, one I'm not sure of by the screenshot. You were being routed to forums.longhaircommunity, which has a valid certificate as far as my browser and certificate store can tell. Since you're familiar with the link, you can always click and verify the certificate (though I would never do this with a site you don't know/trust). My only other thought would be that you're routing through a proxy that doesn't trust the signing authority - this can happen if you're on a different network than you normally use.

[neko_kawaii]

Can we at least get some re-assurance that someone is working on this? :)


This one is beyond me. Trying to see if I can get Gumball's attention or if it is something Stephanie will need to take care of.

The pros have been notified.

[lapushka]

The pros have been notified.

Thank you so much! <mwah> :D

[YvetteVarie]

Also experiencing difficulties when trying to access LHC. My browser doesn't trust the site

[eresh]

The issue you described is of a different cause, one I'm not sure of by the screenshot. You were being routed to forums.longhaircommunity, which has a valid certificate as far as my browser and certificate store can tell. Since you're familiar with the link, you can always click and verify the certificate (though I would never do this with a site you don't know/trust). My only other thought would be that you're routing through a proxy that doesn't trust the signing authority - this can happen if you're on a different network than you normally use.

Nope, I am on my usual connection, no proxy.
I didn't change anything and never got this pop-up about LHC being an unsafe site before.
But this started happening a few days ago.

[eresh]

The pros have been notified.

Thanks! :o

[eadwine]

Read my above post, I called out which domain has an expired certificate. I mentioned that forums.longhaircommunity does not. :)

Ah.. I see this in Chrome.. just click the advanced button and then proceed.

https://i.imgur.com/o9OphZA.jpg

[Krissycats]

I tried for a couple of days using Safari and couldn't get on. I tried again tonight and then switched to Firefox, which works fine.

[eresh]

I use Firefox and it doesn't work here.
Still getting warning popups about the site being unsafe, do not follow the link (in lhc emailnotifications)

[lapushka]

I use Firefox, and so far it's still fine. I never follow e-mail links to the forum, though. I have it bookmarked.

[eadwine]

Any news on this?

[eresh]

Still getting those warning popups on the links in email notifications from LHC.

[eadwine]

At least Chrome isn't getting huffy about it. Not throwing those popups at least.

[eresh]

I'm getting the popups in Gmail. Links open in Firefox.

[ReadingRenee]

I am getting the warning in Chrome. I haven't been able to access this site for a few days, because of this warning, but I had a long hair community forum window pulled up on my old chrome book and when I refreshed the forum link everything was fine. I can't bring myself to advance through the security warnings on my laptop with the updated chrome though.

[lapushka]

I am getting the warning in Chrome. I haven't been able to access this site for a few days, because of this warning, but I had a long hair community forum window pulled up on my old chrome book and when I refreshed the forum link everything was fine. I can't bring myself to advance through the security warnings on my laptop with the updated chrome though.

I fear this is going to be one empty place in a couple days if not fixed soon.

Any updates or news on this yet? Mods?

[Chromis]

We are still trying to work out what is happening and why it is that one spot since it shouldn't be!

[Sarahlabyrinth]

I'm on Google Chrome and having no problem.

[Lady Stardust]

I only get a warning if I click on the Home page, the rest of the forum is fine.

[lapushka]

We are still trying to work out what is happening and why it is that one spot since it shouldn't be!

If the certificate expires on a particular date, isn't it just a question of getting a new one in time, before the old one expires? :)

[eresh]

I didn't get any popups in Gmail when I clicked the links to the subscribed threads, yay!

[lapushka]

Looks like it's solved then? :D

I never got issues, personally. But I really felt for you guys with the issues.

[eadwine]

Issued On Friday, June 7, 2019 at 2:00:00 AM
Expires On Friday, September 6, 2019 at 1:59:59 AM


Looks like that got sorted.

[eresh]

Aaaaaah cheered too early.
Got warning popups again today when I click the threadsubscription links in Gmail :-(


https://i.imgur.com/nQbdAlCh.png

[lapushka]

eresh, is it an idea to just bookmark the forum search page and go from there? That's what I do, and it helps me reply to a lot of threads instead of singling out a few conversations.

Maybe something's up with gmail as well?

IDK. I have NO idea!

[eresh]

I have already bookmarked the LHC ofcourse!
But I find it more handy to follow the thread subsription links.
It has always worked very well without problems, ... untill recently.

[ReadingRenee]

I was finally able to load up the main page without warnings. So yay! Thanks to the powers that be for taking care of it. I never follow email links so I am not sure about that.

[lapushka]

It has always worked very well without problems, ... untill recently.

I hope someone can figure this out for you.

[neko_kawaii]

eresh, what browser or email client are you using? I'm going to try to recreate that warning if I have the same software.

[eresh]

I use Gmail and Firefox :o

Today it seems to be working like normal again....
Cross fingers that it will stay this time!

[neko_kawaii]

I don’t have Firefox, but tested gmail in both chrome and explorer with no issues. If it happens again, see if your Firefox needs updating.

[eresh]

It is still working :o
So it seems the problem is solved.

I have the most recent FF update installed, but when I go to the forum directly, there was no issue.
Only when I clicked the link to a subscribed topic in Gmail did I get the warning.

[eresh]

Oh nooooooo :eek:

Getting warnings again today.
When I click the link in the LHC mail (Gmail)

https://i.imgur.com/C707MGqh.png

[lapushka]

Maybe the fault is with gmail, not with the LHC? Could that be, because the certificate is good and valid as far as I can see, eresh. Maybe they have the forum blacklisted or something?

[eadwine]

If it were gmail it would be with all the mails. Not just a few.

[eresh]

I think so too Eadwine.
It's the link to the forum which causes the popup.
And not with all LHC mails, just a few, occasionally.
Yesterday it worked perfectly all day!
Today there was this one again with the warning and the ones after it were normal.

[eadwine]

It's like with the oak processionary caterpillar.. then you're itchy, then you're not. Annoying.

[eresh]

LOOOOL :laugh::laugh:

[neko_kawaii]

Very odd. I've had the occasional trouble in gmail where it suddenly decides that a random message from a list serve is spam but leaves the rest alone.

[eresh]

Today the same, clicked on the link in the email and it was fine, clicked another emails link and got the warning again.
So strange that in on one link it is fine and another link is suspiscious.

[neko_kawaii]

Are the suspicious ones for specific threads? It is possible someone posted a link to something suspicious within a thread.

[eresh]

No, it is completely random.
This morning I got a warning for the "Show me your buns" thread.
This afternoon the notification for "Show me your buns" and the link worked fine.

[neko_kawaii]

Maybe gmail is just wigging out. *shrug*

[eadwine]

Is one link going to http and the other to https maybe?

[EdG]

This seems like a Gmail problem. The previously-expired certificate may be causing Gmail (Google) to flag LHC as untrusted.

Instead of email notifications, you can go to LHC and check on threads that you subscribed to or recently posted to (click on your username at the top of the screen, and click on My Activity -> Username).
Ed

[eresh]

Hmmm I really like to keep track of my subscribed thread through email.
Instant notification when someone posts :o
I'll just have to dwal with it, I'll see what happens when I click Go Ahead on the warning.
Maybe Gmail will remember that it is a trusted site for me then.

[eresh]

Googling on it I get this:

How to solve "Suspicious link This link leads to an untrusted site. Are you sure you want to proceed
https://support.google.com/mail/forum/AAAAK7un8RUdK0da2oRnrE/?hl=en&gpf=d/topic/gmail/dK0da2oRnrE

https://support.google.com/mail/forum/AAAAK7un8RUr98NY0s_5qg/?hl=en&msgid=WhFYHGEqBwAJ&gpf=d/msg/gmail/r98NY0s_5qg/WhFYHGEqBwAJ


Is this something the admins can do?
I didn't have this issue for years, just untill recently.

[neko_kawaii]

The second link you posted has a more accurate description of the issue. I checked Google's transparency report tool (https://www.google.com/transparencyreport/safebrowsing/diagnostic/?hl=en) and it sees no issues. Unfortunately, that thread doesn't have any other suggestions for resolving this problem. (The other suggestions are to prevent the email from being blocked or put in the spam folder.)

[eresh]

Is one link going to http and the other to https maybe?

I just got another warning popup, but the link was https.

Now I clicked PROCEED instead of BACK.
Nothing happened, it went to the LHC thread like normal.

It does seem to be happening mainly to threads where a photo was posted.

[eresh]

The second link you posted has a more accurate description of the issue. I checked Google's transparency report tool (https://www.google.com/transparencyreport/safebrowsing/diagnostic/?hl=en) and it sees no issues. Unfortunately, that thread doesn't have any other suggestions for resolving this problem. (The other suggestions are to prevent the email from being blocked or put in the spam folder.)

Thanks for checking!

I will just ignore the warning popups, I know LHC is safe right ? :o

Edit: I found this also for a reason why the popup is triggered in Gmail:
"This page is trying to load scripts from unauthenticated sources: The site that you're visiting is not secure."
It mainly happens I think when the link goes to a thread where a photo was posted.

[neko_kawaii]

I was wondering if it was photos.

[eresh]

Maybe the scripts of a certain hosting site?
I will keep an eye on the threads that give the warning popup, and see if it was a photopost and where the photo was hosted

[eadwine]

Maybe imgur? You could mail yourself a link to a photo and see what happens? Many are using that one now, so.. who knows.

[EdG]

It would not surprise me if Google were silently following the link, scraping all the information about the user that it can mine, doing a security analysis to try to appear useful, and reporting back "I don't think this link is safe (but it has already told me a lot about you)!" :silly:

I won't go near Gmail.
Ed

[eadwine]

*hands you your tinfoil hat back* ;)


If you want to be safe, don't go on the internet. At all.

[EdG]

*hands you your tinfoil hat back* ;)


If you want to be safe, don't go on the internet. At all. On a serious note, the Internet is pretty useful. I try to avoid "free" services that have big privacy costs.
Ed

[eresh]

Maybe imgur? You could mail yourself a link to a photo and see what happens? Many are using that one now, so.. who knows.

I just did this to try, it worked without a problem.
But I'm compiling a document with all the popup warnings and whether the link leads to a picture and where it is hosted.

[eresh]

The score so far :

Suspicious link warning popup:

Link to “Put your photos here because you really want to” thread, new post has an IMGUR photo in it.
Link to “Show me your buns” thread, new post has a Postimg photo in it. (https://postimg.cc/K4bYZw2n)
Link to Ficcare thread, new post has imgur photo in it. (https://i.imgur.com/ZuaY0Lj.jpg?2 )



Link to the Braid topic
https://i.imgur.com/tRsKhJM.jpg DID work without a warning, strange enough, as it is also imgur

[eadwine]

I wonder.. maybe it is the settings of the image.

You can upload to private, only those with the link can see it.
You can also upload to public so anyone can see it.

Might be the private ones are throwing up the error. No way to find out though how they are shared, I think..

Aside from asking the poster of course :)

[eresh]

Maybe?

When the new post contains a quoted picture there is no warning btw

[eresh]

Not getting any warnings anymore!
It seems to be resolved.