Trek-lite not secure

Security out of date? Getting the not secure warning when visiting.

I get a warning every time I have to log in, "Your connection to this site is not private, passwords can be stolen" etc type thing. Doesn't matter which browser. It's been like that for a long time and I've kept meaning to mention it, so I'm glad @Ken T. has.

I get the warning too. Even at the top, in the browser bar, I can currently see "Not secure"

Sure it's not your virus protection?

looks a facebook thing

sdk.js?hash=c2f4dcbd0ed43639fe3a986774ec0143&ua=modern_es6:52 The method FB.getLoginStatus will soon stop working when called from http pages. Please update your site to use https for Facebook Login. https://developers.facebook.com/blog/post/2018/06/08/enforce-https-facebook-login/
b @ sdk.js?hash=c2f4dcbd0ed43639fe3a986774ec0143&ua=modern_es6:52

Following advice on the Chrome browser, I added "https://" before the www in the url and it opened as a secure site.

Unfortunately, I can't bookmark it as a secure site.

I've had it a while on Safari (latest version) but having looked at this thread, its because my auto complete was directing me to the Http version of old. A quick change to ps and its all good and pointing to the secure version. I'll be sure to save that now.

IOS on a iPad mini through Safari. I guess I’ll try the kludge fix.

Positive. And I use Linux

It seems to be because the server is not configured to redirect http requests to https.

You will have to explicitly request https by putting https://www.trek-lite.com in the location bar or your bookmark

I you just enter www.trek-lite.com the browser will assume you wanted http://www.treklite.com.

Since this has still not been fixed :

In .htaccess in the http site put:

Code:

<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>


# Redirect to the HTTPS site
RewriteEngine On
RewriteCond %{HTTP:X-Forwarded-SSL} !on
RewriteRule %{REQUEST_URI} !^/(.well-known)(/|$)
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

This redirects all requests to http://*** to https://***

Just deleted mine off of bookmarks on my iPad and now saved secured version.
Well thought I’d sorted but every time I go onto bookmarks I get the unsecured site
even though I had removed the old site and added the secured site? Now when I press the Home button I get kicked out but I am still shown as being online

And all the links(or all the ones I've looked at) are to http.

That's why the proper fix is to get the server to redirect all http requests to https.

May I ask what the steps you take to achieve this, thank you

I pasted the fix I have on my websites in my previous post - but the exact implementation depends on how the Trek-Lite server is configured.

There's nothing the humble user can do except hope the site admins take it on board and fix it at the server.

OK thank you for your reply.

I've checked this too, and clicking the home button on the site menu does takes you to http: so its in the program code, not your computer.

Hope that helps!

Re read Shetland's posts and I realise thats whats meant by all links are to http:

Thanks Shewie