Website security warning / SSL/HTTP issues

This topic has been viewed 7226 times and has 1 replies
Thread status: Active
Questions about Sweet Home 3D installation [img]http://www.sweethome3d.com/images/flags/en_small.gif[/img]
Post Reply New Topic
waxoca4241
Posts: 1
Joined: Tue May 09, 2023 1:47 pm

Website security warning / SSL/HTTP issues

Post by waxoca4241 »

This might not be the correct forum/topic, but I did not find a better place to post this:

When I visit the website, my browser (Firefox) alerted me that there are security issues with the website.

When I looked into it, I noticed a few issues:

1.
At the bottom of the website it loads an image from sourceforge.net and explicitly uses HTTP (instead of HTTPS).
The link is: [http://sflogo.sourceforge.net/sflogo.ph ... 68&type=12]
Changing the 'http' to 'https' should be sufficient to solve this issue.
search keywords: Mixed content blocking in Firefox

2.
When visiting http://sweethome3d.com , your website does not automatically forward me to the https://.. version of your site, which it should. This allow MITM hackers to have your website visitors download virus-infected copies of your software; additionally, it lowers the search engine ranking and the security warning might scare off visitors.

3.
The current webserver software is outdated (Apache 2.4.38) and might be vulnerable to various security issues.
You can check this using:
$ wget -q -O- --save-headers sweethome3d.com | grep '^[Ss]erver:' | awk ' {print $2}'
Apache/2.4.38


Do you need help in fixing this?

Kind regards,
Sebastiaan
User avatar
Puybaret
Posts: 9440
Joined: Mon Nov 07, 2005 12:00 pm
Country: Paris, France
Contact:

Re: Website security warning / SSL/HTTP issues

Post by Puybaret »

1. Not an issue, just a warning from your browser.

2. I prefer to keep it like that for compatibility with old browsers. Scared people just have to type "https" instead of "http".

3. I'll install the new version when available.
Emmanuel Puybaret, Sweet Home 3D creator
Post Reply New Topic

Who is online

Users browsing this forum: No registered users and 0 guests