US Site Certificate issue

[mossler]

<puts on cyber security propeller beanie>

Dear I Run Guns

I expect you are aware that your US website is throwing out an expired and non-name matching SSL certificate ?

Any ETA to fix it ?

Thanks!

</beanie off>

[mossler]

addendum: if one follows the Canadian site and clicks through to the US site, no certificate issue reported.

If you go direct to irunguns.com, error reported.

Hmm.

[CobraGuy]

They mentioned in another post that they switched domain names or something....

[mossler]

They mentioned in another post that they switched domain names or something....

Looks like they disable SSL when moving from the Canadian site to the US one. When you click on Login on the US one, it takes you to Connected Data Solutions and no encryption.

I'll wait until they fix all this.

[IRUNGUNS]

We have checked and the cart is secure on www.irunguns.com. We have sent a ticket in just to make sure there are no issues but the site uses an enhanced SSL cert that is working fine. You may want to clear your cache. www.irunguns.us now forwards to www.irunguns.ca should that be the site in question.

Thanks for letting us know.

Have a great afternoon.

Looks like they disable SSL when moving from the Canadian site to the US one. When you click on Login on the US one, it takes you to Connected Data Solutions and no encryption.

I'll wait until they fix all this.

[mossler]

Thanks for looking into it.

FYI, going to https://www.irunguns.com on clean cache browsers, shows a invalid SSL cert.

If you click through the warning, the lower right corner login is http, and takes to a login that is not secure.

I'd say at the very least, configuration issue.

[Prettyniceguytoo]

Thanks for looking into it.

FYI, going to https://www.irunguns.com on clean cache browsers, shows a invalid SSL cert.

If you click through the warning, the lower right corner login is http, and takes to a login that is not secure.

I'd say at the very least, configuration issue.

Yup, logging in via 'my account' is not secured via https, that's... like one of the most important times to encrypt the connection.

[captainamazing]

addendum: if one follows the Canadian site and clicks through to the US site, no certificate issue reported.

If you go direct to irunguns.com, error reported.

Hmm.

Have you tried turning it off and on again?