This is the first time I've seen this. Anyone else seeing this?
Running MACbook Pro OS X 10.11.6 and Google Chrome Version 94.0.4606.61
Does the same thing with Safari Version 11.1.2 (11605.3.8.1)
Attachments
Images (2)
Original Post
Replies sorted oldest to newest
I’m running the website on an iPad with 14.7.1 software. I’m not getting that notice in safari. Very strange. I do seem to remember starting to get that notice on my iPhone a number of months ago with other websites I frequently visited and realized that Apple upped their internet security protocol requirements. I needed to change my ISP to wp2 or something like that (one with higher encryption) and it went away on that device. I may be getting the acronyms wrong, since I am basically a functional illiterate with these types of things.
although not directly on point, I quickly found this with a web search - https://forums.att.com/convers...a51a72a09d3b07501c40
setting mine to wp2 only fixed everything.
I see it on my iPad but it's in white lettering on blue background with a ? at the end.
We're reading from and posting to a public site so it doesn't matter. This is different from connecting to say, your bank website. HTTPS used to be for secure networks but it seems most sites are now addressed that way.
It is not that the OGR Website is insecure, it is that the security certificates have been upgraded and are essentially too new for the older hardware/software to validate these new certificates.
For those wishing to dive deep in to the technical aspect news articles:
https://forums.macrumors.com/t...this-is-why.2314627/
https://mjtsai.com/blog/2021/0...l-capitan-and-older/
https://community.letsencrypt....th-el-capitan/161231
The Fix/Workaround:
You need to manually install the new root certificate on your system. For older macOS not updated by Apple:
- Download the ISRG Root X1 certificate file from http://x1.i.lencr.org/
- Open the Keychain Access app and drag that file into the System folder of that app.
- Find the ISRG Root X1 certificate in System and double click on it, open the Trust menu and change "Use System Defaults" to "Always Trust", then close that and enter your password to confirm the change (if prompted).
Note: Obviously, one needs to carefully vet any instructions about adjusting one's systems security measures from "some random stranger on the internet"
bmoran4 has is exactly correct. Keep in mind that sites that have the "https" are secure. The "s" indicates that.
