Hi Couch Support,

I am new to CouchCMS and I am really impressed by the functionality and the power of this light CMS, thanks for developing it, it is amazing and also easy to understand.

I have when question which is. whenever I try to login my site admin page I receive this message from the browser "Your Connection is not secure, Logins entered this site could be compromised." mostly I use Firefox. this can give worries to clients.


What does this message mean and How can I solve it ?

Thanks in advance.

Bile

[KK]

Hi

Thank you for appreciating out little CMS.

Replying to your query -
the security warning you mentioned suggests that your site is not using SSL.
Strictly speaking it has little to do with Couch and you'll receive this warning regardless of whatever script you use on that server.

As to what this 'SSL' is, I can only give you a brief description (please google for it if you wish to have more details) -
taking the example of this very forum, if you take a look at the address-bar in your browser, you'll see that is showing -

https://www.couchcms.com/forum/...

Please notice that 's' in 'https'. It stands for 'secure'.

If you compare it with the URL of your site that is showing the warning, you'll find that its URL would be missing this 's' and have a plain 'http'.

When a site uses 'https' (i.e. secure http), all the communications between the browser and the server take place in an encrypted manner. This prevents anyone from eavesdropping on the traffic and finding out sensitive data e.g. passwords (which is precisely what you are being warned about by the browser).

Needless to say, from a security point of view, https is far securer than plain http. Of late, there has been a push from Google (with all major browsers taking a cue) to encourage (force?) people to move to https.

As to how you can make your site use https, please contact your web-host and it will install a SSL certificate for you on the server. It will cost you some money though (around $50 per annum).

Hope this helps.

Hi KK,

this is well understood, thanks for your descriptive details on this question, I will contact my host provider to install the https certificate.

Thanks again for the amazing product.


regards,
Bile.