macc metals

[Brian GroomeParticipant @briangroome43093]

Problem seems to be sorted now.

Brian

[Harry WilkesParticipant @harrywilkes58467]

Still a problem for me so on this occasion I have ordered elsewhere.

H

[John MilliganParticipant @johnmilligan78347]

Just spoken to Joe at Macc Metals and it is his security provider that will be sorting it out today, John

[Michael GilliganParticipant @michaelgilligan61133]

Posted by Michael Gilligan on 17/01/2016 17:45:43:

Joe,

… seems that it's GeoTrust [your certificate issuer] that is not trusted, rather than your good self.

.

My justification for that comment is here

MichaelG.

.

[quote]

Symantec also offers free 30 day certificates through its GeoTrust brand. The short validity periods are ideal for fraudsters as phishing attacks themselves typically have short lifetimes.

[/quote]

Edited By Michael Gilligan on 18/01/2016 15:18:25

[John MilliganParticipant @johnmilligan78347]

Website all up and running again, just placed my order

[OuBallieParticipant @ouballie]

When entering any personal data or at any checkout page ALWAY check that the page address begins with https:// as that indicates a secure connection.

Hate to admit it, but I was caught out last month, but thankfully our bank noticed a charge from China and immediately sent a text message enquiring if I really did make the purchase.

"NO" was my response and I phoned them straightaway, to be told that it is now a common occurrence for people to be caught by scam website!

Card was cancelled there and then and new one received two days later.

To say I was embarrassed is a BF understatement!

Geoff – For the first time I hadn't checked for that https in the address header.

Edit:

Macc do have https:// 

Edited By OuBallie on 19/01/2016 14:55:18

Edit by Neil – added the missing S in https above!

Edited By Neil Wyatt on 19/01/2016 16:12:54

[Steven VineParticipant @stevenvine79904]

OuBallie

That is very sound advice indeed.

Thankfully I am now pretty much in the habit of looking at the https:// address before committing to any serious stuff.

Before pressing the button and committing, look at the address.

Steve

[Joe PoultonParticipant @joepoulton39263]

Hi Everyone

Joe here managing director of Maccmodels.

It is correct that our SSL certificate did indeed run out Sunday afternoon, but that is all that happened. Our site wasn't hacked, hijacked or anything else that some people maybe suggesting

I would recommend you NEVER enter a site that has a out of date certificate, or just doesn't have one, even if you know the website or not.

I can confirm that the security certificate has been updated and approved until 2018, you can see this by visiting our website and clicking on the pad lock where it will show you the certificate.

If anyone has any concerns, or problems with the website please contact me [email protected]

Any orders placed over the weekend may have a small delay. As you can imagine it has been a very stressful last two days, and I am a little behind with orders, but am hoping to be straight by the end of tomorrow.

Thanks for your continued support and I can only apologies for any problems this may have caused you.

 

Kind regards Joe Poulton

Edited By Joe Poulton on 19/01/2016 15:43:57

[Neil WyattModerator @neilwyatt]

Thanks for the update, Joe.

Neil

[Michael GilliganParticipant @michaelgilligan61133]

Posted by OuBallie on 19/01/2016 14:53:58:

Edit

Macc do have https://

.

Geoff [and Joe]

Please forgive me for labouring this …

The point of the NetCraft article is that it is also possible [indeed, frighteningly simple] for a spoof website to be set-up, which also has https://

The fault lies not with Joe, but with the Certificate providers; who are getting greedy, and sloppy with their security checks.

I will refrain from further comment on the matter.

MichaelG.

[OuBallieParticipant @ouballie]

Neil,

Thanks for the edit

Michael,

I failed to read the links. Slap slap slap.

Bl@@dy h*ll, didn't realise that was now happening.

It will spell the end of internet business if we loose trust in https!

Those in the CAs responsible for allowing this should be put against a wall and shot!

As you say, greed, which knows no bounds.

Don't know if big industry are able to sort the CAs out, for I fear that their security expertise leaves one in doubt.

Please don't refrain, we need all the info we can get hold of to safeguard us against the 'counts'.

If not sorted, we will be back to sending letters and cheques after making phone call to check authenticity.

Geoff – Only 'Big Brothers' have the clout to sort this, provided that is they even comprehend the looming problem.

Edited By OuBallie on 20/01/2016 14:55:31

[Author]

Posts