Site Not Secure?

nicstt

jestmart said:

If you have installed something with Connect it is on your computer not in some 'cloud', the DAZ site being down won't stop you from using them.

If a DRM system doesn't like something you've done on your computer, it phones home; if home is not available, you can NOT access DRMed (only DRMed as far as I am aware) products.

That is not me being paranoid (of course I am but that is not the issue here), but how DRM works.

On Netflix, you're streaming content so not an issue; these are products those that bought into DRM purchased, which they use only at the behest of a security system.

This is most definitely on topic; unsheduled outages, or outages that were scheduled but not advised, are something that makes me even more cautious.

RAMWolff

DAZ_Rawb said:

To fill you all in on what is going on:

 

Browsers have started switching their opinion of what is secure and not secure around a little. Modern browsers are looking for anything that looks like a username or password field on a page and if they can find it, and the page isn't HTTPS (secured and encrypted web traffic) they will start complaining. Previously they would only complain when a password was attempting to be sent to a non-HTTPS site. Our system always makes sure that all passwords (and credit card numbers) that you are sending are going over a secured and encrypted method, which is why you have not gotten complaints about this from your browser in the past.

 

The web team here will be working on switching the entire site over to HTTPS, we would have done it in the past but there were some chunks of code in the system that would fight it and turn in to infinite redirect loops. In order to do it correctly it will take some time, so don't expect a sudden change in the upcoming days but know that it is coming.

Will that help fix the constant issues of having to log into the forums? 

nicstt

RAMWolff said:

DAZ_Rawb said:

To fill you all in on what is going on:

 

Browsers have started switching their opinion of what is secure and not secure around a little. Modern browsers are looking for anything that looks like a username or password field on a page and if they can find it, and the page isn't HTTPS (secured and encrypted web traffic) they will start complaining. Previously they would only complain when a password was attempting to be sent to a non-HTTPS site. Our system always makes sure that all passwords (and credit card numbers) that you are sending are going over a secured and encrypted method, which is why you have not gotten complaints about this from your browser in the past.

 

The web team here will be working on switching the entire site over to HTTPS, we would have done it in the past but there were some chunks of code in the system that would fight it and turn in to infinite redirect loops. In order to do it correctly it will take some time, so don't expect a sudden change in the upcoming days but know that it is coming.

Will that help fix the constant issues of having to log into the forums? 

That is a little irritating.

ANGELREAPER1972

nicstt said:

RAMWolff said:

DAZ_Rawb said:

To fill you all in on what is going on:

 

Browsers have started switching their opinion of what is secure and not secure around a little. Modern browsers are looking for anything that looks like a username or password field on a page and if they can find it, and the page isn't HTTPS (secured and encrypted web traffic) they will start complaining. Previously they would only complain when a password was attempting to be sent to a non-HTTPS site. Our system always makes sure that all passwords (and credit card numbers) that you are sending are going over a secured and encrypted method, which is why you have not gotten complaints about this from your browser in the past.

 

The web team here will be working on switching the entire site over to HTTPS, we would have done it in the past but there were some chunks of code in the system that would fight it and turn in to infinite redirect loops. In order to do it correctly it will take some time, so don't expect a sudden change in the upcoming days but know that it is coming.

Will that help fix the constant issues of having to log into the forums? 

That is a little irritating.

doesn't look like it as I've had the auto sign in out in few times since then. nicstt you do bring up an interesting point regarding the connect encrypted stuff and yes I have bought that content myself  haven't avoided it but still there were a few times when haven't been able to connect sign in in studio and was unable to access my content perhaps another issue or then again perhaps not I don't know

RAMWolff

A little more than irritating for me.  Just had to log back in.  Grrrrrrrrrrrrr

Taoz

ANGELREAPER1972 said:

nicstt said:

RAMWolff said:

DAZ_Rawb said:

To fill you all in on what is going on:

 

Browsers have started switching their opinion of what is secure and not secure around a little. Modern browsers are looking for anything that looks like a username or password field on a page and if they can find it, and the page isn't HTTPS (secured and encrypted web traffic) they will start complaining. Previously they would only complain when a password was attempting to be sent to a non-HTTPS site. Our system always makes sure that all passwords (and credit card numbers) that you are sending are going over a secured and encrypted method, which is why you have not gotten complaints about this from your browser in the past.

 

The web team here will be working on switching the entire site over to HTTPS, we would have done it in the past but there were some chunks of code in the system that would fight it and turn in to infinite redirect loops. In order to do it correctly it will take some time, so don't expect a sudden change in the upcoming days but know that it is coming.

Will that help fix the constant issues of having to log into the forums? 

That is a little irritating.

doesn't look like it as I've had the auto sign in out in few times since then. nicstt you do bring up an interesting point regarding the connect encrypted stuff and yes I have bought that content myself  haven't avoided it but still there were a few times when haven't been able to connect sign in in studio and was unable to access my content perhaps another issue or then again perhaps not I don't know

It often auto log in for me, but I never have to log in manually. Maybe because I always log in to the store (also auto, sort of, with Roboform) before I go to the forums.

frank0314

The log in and log out problem is sporadic. I stay logged in unless I don't go to the site for 1 day. I very rarely have to re-log in.

nicstt

ANGELREAPER1972 said:

nicstt said:

RAMWolff said:

DAZ_Rawb said:

To fill you all in on what is going on:

 

Browsers have started switching their opinion of what is secure and not secure around a little. Modern browsers are looking for anything that looks like a username or password field on a page and if they can find it, and the page isn't HTTPS (secured and encrypted web traffic) they will start complaining. Previously they would only complain when a password was attempting to be sent to a non-HTTPS site. Our system always makes sure that all passwords (and credit card numbers) that you are sending are going over a secured and encrypted method, which is why you have not gotten complaints about this from your browser in the past.

 

The web team here will be working on switching the entire site over to HTTPS, we would have done it in the past but there were some chunks of code in the system that would fight it and turn in to infinite redirect loops. In order to do it correctly it will take some time, so don't expect a sudden change in the upcoming days but know that it is coming.

Will that help fix the constant issues of having to log into the forums? 

That is a little irritating.

doesn't look like it as I've had the auto sign in out in few times since then. nicstt you do bring up an interesting point regarding the connect encrypted stuff and yes I have bought that content myself  haven't avoided it but still there were a few times when haven't been able to connect sign in in studio and was unable to access my content perhaps another issue or then again perhaps not I don't know

I've no idea, exactly, how Daz has implemented the DRM system into Studio; I uninstalled the SQL components. I can say, that even when there have been issues getting onto the sites, or to DIM to download content I've recently purchased (it can be a day or two before I download what I've purchased.), that I can ALWAYS use what I've already downloaded.

... And Daz wonders why some of us don't trust DRM systems. They (DRM systems) start off with the premise that the person trying to access content has to prove they are entitled to do so; sometimes, such a process is bound to fail. Computers are like that. :)

Whilst the signing in and out is a little annoying at times, I use a password manager, and it handles it for me. I have one very long, complicated password that I remember. It's about 30 characters - random ones. It is also safe to assume that eventually everywhere will get hacked. So I take steps and regularly change passwords.

It is a hastle, but no where near the hastle of having my bank account emptied, or my identity stolen. I do what I can to not be a low-hanging fruit.

ShelLuser

jestmart said:

If you have installed something with Connect it is on your computer not in some 'cloud', the DAZ site being down won't stop you from using them.

Yes it will, or put differently: yes, that can most definitely happen. The moment this system thinks that something changed on your PC it'll insist on re-authenticating itself before you can use the now locked down items again. And to add insult to injury sometimes a simple change in your routing table (route delete 0.0.0.0 / route add 0.0.0.0 mask 0.0.0.0 <IP of new gateway>) can be enough to make DS think that something changed.

I had this happen to my system many times now. However, it doesn't bother me too much because I avoid Daz Connect with a passion, I only installed a few freebies last year (a bed) and that's about it. And during the last outage I honestly couldn't use the bed. Locked, "too much changed" on my PC.

In all fairness though: I never bothered to try and get an offline setup yet, maybe I should to give that a try as well. But if you simply use Daz Connect then you most definitely risk that you will no longer be able to use your stuff whenever you can't login.

 

Ati

I see the whole site is being moved over to https.

DAZ_Rawb

Hopefully I caught any of the little issues left. Let me know if you get stuck in any infinite-redirect tarpits, I gave it some good testing over here but there is always a slight chance something slipped by.