Friday, May 14, 2021

Hilton Head Island: sabotaged update

I have discovered that the 'Deceptive Website Warning' does not appear on my MacBook running Mac OS.  It does appear on both my iPhone 12 Pro and my iPad Pro running IOS.  

On the MacBook the site appears normal.

7 comments:

David Hughes said...

The warning does not appear on my new iPad. But it did on my iPhone 12. I sent in a report that your site was indeed safe….sure hope they resolve it. I’d be most distraught if you threw in the towel.

johnz said...

Nothing fishy showed up on my Windows 10 PC. All looks normal.

Antares said...

I didn't get any message/warning in any of my devices. Very strange.

Conchscooter said...

Dear Webb
The Internet overlords want you to pay more to secure your site. I think the problem such as it is comes from not have a proven secure site.
http://
versus
https://
You have to pay extra to get an S (secure) designation. Yay!
Key West Diary is https secured....you are safe to browse.
"Authentication means verifying that a person or machine is who they claim to be. In HTTP, there is no verification of identity – it's based on a principle of trust. The architects of HTTP didn't necessarily make a decision to implicitly trust all web servers; they simply had priorities other than security at the time. But on the modern Internet, authentication is essential.

Just like an ID card confirms a person's identity, a private key confirms server identity. When a client opens a channel with an origin server (e.g. when a user navigates to a website), possession of the private key that matches with the public key in a website's SSL certificate proves that the server is actually the legitimate host of the website. This prevents or helps block a number of attacks that are possible when there is no authentication."

Webb said...

That is useful information. I will see what I can learn about this next week.

Rik_Studio said...

In addition Blogger has a setting to force the site to open in https. the encryption is free.
The latest versions of all browsers do not even allow users to open http url's anymore to protect users from cross scripting efforts.
Just look for Design-Settings HTTPS redirect option and turn it on.

Webb said...

Thanks, Rik. I am going to try to arrange HTTPS this week, but will look for the setting.

What is odd to me is why this happened Friday when the situation is unchanged from the way it has been for years and why it ended.