# The connection is not secure

**URL:** <https://forums.505go.com/t/the-connection-is-not-secure/34836>\
**Category:** MtGPQ General Discussion\
**Created:** [April 6, 2017, 3:32am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836 "2017-04-06T03:32:08Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![shteev](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/shteev/32/7929_2.png) [@shteev](https://forums.505go.com/u/shteev)\
**Post date:** [April 6, 2017, 3:32am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/1 "2017-04-06T03:32:08Z")

</div>

Because of course it isn’t.

---

<div class="post-metadata">

**Author:** ![Volrak](https://avatars.discourse-cdn.com/v4/letter/v/f17d59/32.png) [@Volrak](https://forums.505go.com/u/Volrak)\
**Post date:** [April 6, 2017, 4:04am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/2 "2017-04-06T04:04:31Z")

</div>

I was going to post in the new forum thread, but this looks like the right topic - @Brigby, is there any chance the forum site can use https rather than http so everybody’s forum passwords don’t have to fly across the Internet in plain-text?

---

<div class="post-metadata">

**Author:** ![Sarahschmara](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/sarahschmara/32/4849_2.png) [@Sarahschmara](https://forums.505go.com/u/Sarahschmara)\
**Post date:** [April 6, 2017, 4:19am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/3 "2017-04-06T04:19:56Z")

</div>

What a wonderful opportunity to update one’s passwords!

Yikes!

---

<div class="post-metadata">

**Author:** ![Steeme](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/steeme/32/4270_2.png) [@Steeme](https://forums.505go.com/u/Steeme)\
**Post date:** [April 6, 2017, 8:15am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/4 "2017-04-06T08:15:20Z")

</div>

Thanks for pointing it out, didn’t even pay attention to that.

---

<div class="post-metadata">

**Author:** ![majincob](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/majincob/32/8386_2.png) [@majincob](https://forums.505go.com/u/majincob)\
**Post date:** [April 6, 2017, 12:14pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/5 "2017-04-06T12:14:59Z")

</div>

Changed my password for sure, to some random 16 character one I got from a generator site.  
Outlook says your password reset email “failed our fraud detection checks”. How apropos.

---

<div class="post-metadata">

**Author:** ![shteev](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/shteev/32/7929_2.png) [@shteev](https://forums.505go.com/u/shteev)\
**Post date:** [April 6, 2017, 1:51pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/6 "2017-04-06T13:51:07Z")

</div>

How do I change my password? I can’t find the option…

[edit] oh I’ve got it, you don’t go into your profile, it’s the cog at the far right of the whateveritis bar with your name on it.

---

<div class="post-metadata">

**Author:** ![GrizzoMtGPQ](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/grizzomtgpq/32/2810_2.png) [@GrizzoMtGPQ](https://forums.505go.com/u/GrizzoMtGPQ)\
**Post date:** [April 6, 2017, 1:58pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/7 "2017-04-06T13:58:12Z")

</div>

@shteev The site works with HTTPS you just need to put it in the URL explicitly and accept their old cert. Their brilliant site admins apparently overlooked this small detail. [505 Go! Official Forums](https://forums.505go.com/categories/mtgpq-general-discussion)

---

<div class="post-metadata">

**Author:** ![majincob](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/majincob/32/8386_2.png) [@majincob](https://forums.505go.com/u/majincob)\
**Post date:** [April 6, 2017, 2:07pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/8 "2017-04-06T14:07:56Z")

</div>

tried the link and got:

This server could not prove that it is **[forums.505go.com](http://forums.505go.com)**; its security certificate is from **\*.vanillacommunities.com**. This may be caused by a misconfiguration or an attacker intercepting your connection.

---

<div class="post-metadata">

**Author:** ![shteev](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/shteev/32/7929_2.png) [@shteev](https://forums.505go.com/u/shteev)\
**Post date:** [April 6, 2017, 2:11pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/9 "2017-04-06T14:11:42Z")

</div>

> [@GrizzoMtGPQ](#):
>
> @shteev The site works with HTTPS you just need to put it in the URL explicitly and accept their old cert. Their brilliant site admins apparently overlooked this small detail. [505 Go! Official Forums](https://forums.505go.com/categories/mtgpq-general-discussion)

Are you sure? i just got this:

 ![](https://us1.discourse-cdn.com/flex023/uploads/x505go/original/2X/f/f343edd181cf383c2c50c9dc54a2f01d97d9a3a6.png)

On an unrelated note… how do you embed images in your posts now?

---

<div class="post-metadata">

**Author:** ![Glenghis](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/glenghis/32/6483_2.png) [@Glenghis](https://forums.505go.com/u/Glenghis)\
**Post date:** [April 6, 2017, 2:24pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/10 "2017-04-06T14:24:39Z")

</div>

Like this:

 ![](https://us1.discourse-cdn.com/flex023/uploads/x505go/original/2X/f/f343edd181cf383c2c50c9dc54a2f01d97d9a3a6.png)

---

<div class="post-metadata">

**Author:** ![Glenghis](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/glenghis/32/6483_2.png) [@Glenghis](https://forums.505go.com/u/Glenghis)\
**Post date:** [April 6, 2017, 2:34pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/11 "2017-04-06T14:34:02Z")

</div>

@shteev Seriously, the square box with what looks like mountains is the insert image button. It will ask for the Url and will then embed the image in your post.

---

<div class="post-metadata">

**Author:** ![GrizzoMtGPQ](https://sea1.discourse-cdn.com/flex023/user_avatar/forums.505go.com/grizzomtgpq/32/2810_2.png) [@GrizzoMtGPQ](https://forums.505go.com/u/GrizzoMtGPQ)\
**Post date:** [April 6, 2017, 3:40pm UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/12 "2017-04-06T15:40:23Z")

</div>

That’s telling you they messed up the cert. It’ll still be HTTPS they just need to get the names right by buying a new cert. I.e. their team is a bunch of idiots. Accept the cert and your password will not go out in cleartext.

---

<div class="post-metadata">

**Author:** ![Volrak](https://avatars.discourse-cdn.com/v4/letter/v/f17d59/32.png) [@Volrak](https://forums.505go.com/u/Volrak)\
**Post date:** [April 7, 2017, 10:02am UTC](https://forums.505go.com/t/the-connection-is-not-secure/34836/13 "2017-04-07T10:02:18Z")

</div>

Assuming there’s no man-in-the-middle attack which is the whole point of the certificates in the first place. (Which, honestly, is a highly remote possibility… so yes, probably the best option until they fix the website.)
