Dear Webmasters,

I have been getting a message on my phone
When I log on.

It states: WEBSITE NOT SECURE.

I googled what this meant and that some privacy issues may or may not be questioned.

It happens on my iPhone, my work computers and some Chrome apps.

So from a NL stand-point, SHOULD “we” care?
So I can stop using my iPhone to log on to “some websites that have been certified as “insecure”?

What level of “insecurity” are we talking about?

Checking on Apple. . . . .


https://support.apple.com/en-us/HT204937

If Safari says it can‘t establish a secure connection, or the website is using weak encryption


To protect your security and privacy, websites must use strong encryption to provide a secure web connection.





Security enhancements in OS X Yosemite v10.10.4 and iOS 8.4 help protect against important security vulnerabilities. If a webpage is on a server that doesn't meet secure cryptographic standards:
•Safari will say that it will not open the website because it's using weak encryption.
•Or Safari will say that it can't open the page because Safari can't establish a secure connection to the server.

To resolve the issue, the website administrator should configure their server to be secure.

The message looks like this:

It means the website doesn't have any encryption protocol. Generally, it means the website doesn't have a valid SSL certificate installed. It's an update on recent browsers to flag non HTTPS websites as unsafe. This is cos information exchanged between you and such websites can be intercepted by hackers.

More about switching to SSL here: https://www.nairaland.com/4386800/share-experience-switching-http-https

Bolaji21:
It means the website doesn't have any encryption protocol. Generally, it means the website doesn't have a valid SSL certificate installed. It's an update on recent browsers to flag non HTTPS websites as unsafe. This is cos information exchanged between you and such websites can be intercepted by jackets.

Thanks.

In lay man’s terms, is it a problem or could it be a problem?

You mean “hackers”?

It's a problem that simply means you don't have SSL installed on your server. Ensuring data security is the duty of a web master. The problem can be easily removed by purchasing an SSL certificate for your website. Most shared hosting plans come with free SSL too..

Bolaji21:
It's a problem that simply means you don't have SSL installed on your server. Ensuring data security is the duty of a web master. The problem can be easily removed by purchasing an SSL certificate for your website. Most shared hosting plans come with free SSL too..

You mean NL website?
Meaning any T, D & H can use an unsecured website as a “cyber gym” to flex hacking muscles?

KanwuliaExtra:


You mean NL website?
Meaning any T, D & H can use an unsecured website as a “cyber gym” to flex hacking muscles?

Nairaland uses TLS which is an http security protocol too. Any website that doesn't use SSL or TLS is unsecure for users. Whatever you type and submit on those websites can be intercepted by any hacker.

Bolaji21:

Nairaland uses TLS which is an http security protocol too. Any website that doesn't use SSL or TLS is unsecure for users. Whatever you type and submit on those websites can be intercepted by any hacker.

What is the scope of insucurity?
To the website and the users?
What can we as users do to protect ourselves if the website is not up to par with the security standards?

KanwuliaExtra:


What is the scope of insucurity?
To the website and the users?
What can we as users do to protect ourselves if the website is not up to par with the security standards?

The only solution is to not use those websites. Or if you must, use a browser like tor or use a browser that doesn't have your browsing record. Cos the security flow comes in when your device attempts to send data to the server. The data can be intercepted before it gets to server and you won't know. So the risk is minister if what you're sending doesn't contain any sensitive data. Same for the response from the server.

Simply don't enter sensitive informations on such sites e.g credit/debit cards and secure login details.

Bolaji21:

The only solution is to not use those websites. Or if you must, use a browser like tor or use a browser that doesn't have your browsing record. Cos the security flow comes in when your device attempts to send data to the server. The data can be intercepted before it gets to server and you won't know. So the risk is minister if what you're sending doesn't contain any sensitive data. Same for the response from the server.

Thanks a lot.
Can you give a list of browsers do not have browsing records?

Using NL as an example.

No one sends sensitive data on a social medium like NL or similar.

So we are safe to use our devices without compromising the personal data on our devices?

softclicktech:
Simply don't enter sensitive informations on such sites e.g credit/debit cards and secure login details.

Credit cards? Oh no. Never!!!!
How do you secure your log in details when you must still log in with your user ID and password?