Security Issue

[JaBek1]

​I seem to be getting a security warning regarding an invalid certificate when I click on the link in my listings for buyers to browse the other items in my store. Has anyone experienced this also? The link has always appeared to work fine in the past I'm wondering what has changed and if I need to remove this link from all my listings? It appears to be occurring with all three stores.

Perhaps it is something to do with my browser. I'm using Google Chrome with Windows 10.

[rocks2dust]

I'm not getting a warning in Microsoft Edge, but on a couple of listings the little lock icon did change to indicate that something on the page wasn't https. A few minutes later, the lock reappeared, so perhaps it was a banner or something else. It may be already fixed, but if you, I or anyone see additional warnings, then a note to support would be in order.

Edited to add: just had another listing exhibit this behavior. Sent a note to support so they'll be aware.

[astral276]

Do you mean this one?



If so you are using an outdated 'shortform' link that will throw a security warning in some browsers as it causes a redirection.

Confirm we are talking about the same link and I'll give you the correct one.

[rocks2dust]

Do you mean this one?

That was what I had suspected. There seems to occasionally be another issue with my listings showing the warning icon in the address bar, but that may have to do with something in the some of the rotating advert banners, as the page content itself is secure. JaBek1 does use an http: link rather than the https: link, which does trigger the warning icon.

[FirstGreenIsGold]

I have links in my listings. To my 'about the seller' page. To my shops. I used to have a link to Jan's shop because she made the template for me. The links are there with the hope that they make navigation easier for newcomers to eBid.

Mid February I closed 1968 listings and started revising one by one because of this security thing. I didn't want to lose the closed listings from my unsold folder, so spent a lot of time in the 75 days following revising and relisting. It was an absolute pain. Maybe there was an easier way, but I didn't know of one. As of today I have 2412 listings running. Those 75 days could have been spent listing new stock instead of trying to save the existing listings from being deleted.

[astral276]

Maybe there was an easier way, but I didn't know of one.

Bulk Edit would likely have done it in a few minutes.

[FirstGreenIsGold]

Bulk Edit would likely have done it in a few minutes.

Astral, I didn't know how to bulk edit the links within the template.

When I tried to edit descriptions on active listings in bulk edit before (a different scenario than this one), all I ended up with was an add-on at the bottom of the template.

[KCAuto]

i'm using opera and link worked with no issues

[rocks2dust]

Perhaps it is something to do with my browser.

As astral276 mentioned, the link to a non-secure ("http:") server will throw up a security warning on most browsers. Also, within your listings themselves, some of the images you are using seem to be pointing to other websites (such as snapagogo) aren't on https: servers. Starting a year ago or so, most browsers began throwing up warnings of one sort or another when non-secure content was displayed on pages hosted on a secure ("https:") server with appropriate certificates. If an image hosting site also has a secure ("https:") server, then it can be just a matter of changing "http:" to "https:" in your listings.

This wasn't anything ebid did: google introduced the warning over a year ago when chrome found mixed http: and https: content on a page, and this feature quickly was adopted by other browsers. I had to go through and change listings and other things on several sites at that time. You can test for yourself why the warnings are being displayed by going to one of your listings, copying its URL address, then pasting into whynopadlock.com to see exactly which items on a page are pointing to non-secure servers and causing the warnings to be triggered.

[JaBek1]

Do you mean this one?



If so you are using an outdated 'shortform' link that will throw a security warning in some browsers as it causes a redirection.

Confirm we are talking about the same link and I'll give you the correct one.

Yep! That is the link I'm talking about. Thanks.