Message Connection not secure on my system, not on other systems
A few weeks ago I migrated my company's website from Adobe BC to Bluehost-Wordpress, updated site having the same domain name with a slightly different web address [http//... instead of www.....]
When I search for and bring up the website using my Firefox [in the MS world] there is a warning message that the website is not secure. Same thing when I use Chrome. When I use MS Edge it looks for the old Adobe BC website and of course cannot find it. But Wordpress [the webpage provider] has done the same searches showing for both Chrome and Firefox that the website is secure.
A friend who is in the MS world used his Chrome message website secure, his MS Edge finds the current webpage address but says the connection is not secure. Another friend who lives in the Apple world says all his searches are OK, including website is secured messages.
Have purged caches, cookies, etc. to no avail.
Anybody know that is going on? May be more than just a Firefox issue though thought would start here. Thanks,
All Replies (5)
cmp2 said
A few weeks ago I migrated my company's website from Adobe BC to Bluehost-Wordpress, updated site having the same domain name with a slightly different web address [http//... instead of www.....]
That's a bit confusing: "http//". You do want to use HTTPS, I assume.
Do you get the full-page error message, or is this limited to a "warning lock" or some other error message?
Full page error messages
Could you test your address(es) on the following site:
https://www.ssllabs.com/ssltest/
Test both with and without www if the site is intended to be accessed that way.
Look for any issue, such as an incomplete certificate chain in the top section of results, or problems for any of the different browsers they test.
Is everything good there?
Modified by jscher2000 - Support Volunteer
You can also check the Web Console and Network Monitor for possible files retrieved via an insecure http:// link.
- "3-bar" menu button or Tools -> Web Developer
- https://developer.mozilla.org/en-US/Tools/Web_Console
- https://developer.mozilla.org/en-US/Tools/Network_Monitor
Hello jscher2000
Meant to type https//, missed the "s"
With Firefox, the gray warning look had a warning (!), clicking on that open a window with warning the the website was not secure. With Chrome, the small window in about the same area had a message website not secure.
The SSL search site you suggested came up with some warnings: - Certificate #1: No DNS CAA - Certificate #2: No SNI, "Server sent fatal alert: handshake_failure" for all Safari and one IE
The lock with the yellow warning triangle can indicate a weak cipher or, that the user accepted an unverified certificate, or more commonly, that images in the page use HTTP URLs instead of HTTPS, also known as "mixed content." If you click the lock to open the drop-down and then click the security section to get more information, what does Firefox say about the situation?
Turns out that most the problems were from deep within a Wordpress page.
Your input did not directly solve the problem but contributed to giving me enough background with which to get agreement from Wordpress there was a problem. They kept passing the buck, eventually agreeing there was a problem buried inside one of the webpages and taking action. Have not solved the problem of MS Edge pointing to the former domain address, perhaps Adobe BC has not properly taken down the webpage even though the account was terminated close to a month ago, perhaps it has sometime to do with MS Edge search engine. Have contacted Adobe, will see what happens.
Most of the problems were solved within Wordpress though your input led to that. Thanks, mucho.
By the way, some feedback about Bluehost-Wordpress. Wordpress was advertised as user friendly. It is far from that. Fortunately I signed on to the one-month Bluesky Pro subscription - there is no way I could have built a webpage without the multitude of callins to that service. And my webpage is a simple one. Even some of the call-in people got discombobulated from time to time. My advice to anyone taking out a web hosting subscription based on Wordpress is to take into account a reality as part of that will be the expense of hiring a consultant unless there is considerable webpage design and coding expertise. The world of webpage design and coding is out of my league, but I am fairly good with computers and intelligent. Wordpress takes more than that, it is clearly not user friendly.