Download

Online

Gallery

Blog

  Index  | Recent Threads  | List Attachments  | Search
 Welcome Guest  |  Register  |  Login
Login Name  Password
 

Sweet Home 3D Forum



No member browsing this thread
Thread Status: Active
Total posts in this thread: 2
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 1945 times and has 1 reply Next Thread
waxoca4241
Newbie




Joined: May 9, 2023
Post Count: 1
Status: Offline
Reply to this Post  Reply with Quote 
Website security warning / SSL/HTTP issues

This might not be the correct forum/topic, but I did not find a better place to post this:

When I visit the website, my browser (Firefox) alerted me that there are security issues with the website.

When I looked into it, I noticed a few issues:

1.
At the bottom of the website it loads an image from sourceforge.net and explicitly uses HTTP (instead of HTTPS).
The link is: [http://sflogo.sourceforge.net/sflogo.php?group_id=152568&type=12]
Changing the 'http' to 'https' should be sufficient to solve this issue.
search keywords: Mixed content blocking in Firefox

2.
When visiting http://sweethome3d.com , your website does not automatically forward me to the https://.. version of your site, which it should. This allow MITM hackers to have your website visitors download virus-infected copies of your software; additionally, it lowers the search engine ranking and the security warning might scare off visitors.

3.
The current webserver software is outdated (Apache 2.4.38) and might be vulnerable to various security issues.
You can check this using:
$ wget -q -O- --save-headers sweethome3d.com | grep '^[Ss]erver:' | awk ' {print $2}'
Apache/2.4.38


Do you need help in fixing this?

Kind regards,
Sebastiaan
[May 9, 2023, 2:10:11 PM] Show Printable Version of Post    View Member Profile    Send Private Message [Link] Report threatening or abusive post: please login first  Go to top 
Puybaret
Expert
Member's Avatar

France
Joined: Nov 7, 2005
Post Count: 9180
Status: Offline
Reply to this Post  Reply with Quote 
Re: Website security warning / SSL/HTTP issues

1. Not an issue, just a warning from your browser.

2. I prefer to keep it like that for compatibility with old browsers. Scared people just have to type "https" instead of "http".

3. I'll install the new version when available.
----------------------------------------
Emmanuel Puybaret, Sweet Home 3D developer
[May 11, 2023, 6:20:58 PM] Show Printable Version of Post    View Member Profile    Send Private Message [Link] Report threatening or abusive post: please login first  Go to top 
[ Jump to Last Post ]
Show Printable Version of Thread  Post new Thread

    Get Sweet Home 3D at SourceForge.net. Fast, secure and Free Open Source software downloads
   
© Copyright 2006-2024 eTeks - All rights reserved