Fixed Northwest Firearms SSL Issues

[Joe Link]

We're aware of the SSL issues affecting the site as of this evening and we're working to resolve them ASAP

Read More

 

[Joe Link]

I think I got it fixed. If anyone has any issues please report them here.

 

[The Heretic]

I had some a few minutes ago - I've had these off and on for a few days. Always about the clock being out of synch. I've had that on a few other sites too - thought it had to do with my version of Chrome being so old.

 

[Joe Link]

Seem to be working ok now?

 

[The Heretic]

I am here. When I had the problem I could not reach the site. So yes, seems to work now.

 

[SUPER X]

I just had it happen , mozzila said my connection is not private and my NWFA account
might be hacked

 

[Mrnorke]

Has the same things for a bit. Good now though.

 

[Joe Link]

I just had it happen , mozzila said my connection is not private and my NWFA account
might be hacked

Is it still happening?

 

[SUPER X]

Is it still happening?

No , should i be concerned ?

 

[Joe Link]

Nope. It wasn't anything malicious

 

[Mikej]

I just had it happen , mozzila said my connection is not private and my NWFA account
might be hacked

I got the same thing on Chrome. No issue now.

"Joey on the Spot"

 

[ATCclears]

@Joe Link the SSL configuration on the web server(s) might be tightened a tad. See results below. Suggestion - only enable the protocols TLS v1.2 and TLS v1.3.

Anyone still using an aged web browser that doesn't support TLS v1.2+ has their own security risks to resolve...

SSL Server Test: northwestfirearms.com (Powered by Qualys SSL Labs)

 

[Andy54Hawken]

I had this issue around 5.25 till about 6.00...
Looking and working good now...YAY...
Andy

 

[ATCclears]

@Joe Link more considerations here on a Mozilla suite of tests. For example, X-XSS-Protection.

Mozilla Observatory

The Mozilla Observatory is a project designed to help developers, system administrators, and security professionals configure their sites safely and securely.

observatory.mozilla.org

 

[Mikej]

@Joe Link the SSL configuration on the web server(s) might be tightened a tad. See results below. Suggestion - only enable the protocols TLS v1.2 and TLS v1.3.

Anyone still using an aged web browser that doesn't support TLS v1.2+ has their own security risks to resolve...

SSL Server Test: northwestfirearms.com (Powered by Qualys SSL Labs)

What a "Geek". "Me"=

 

[bentoncity]

I was down from 530 or so till after 610 with duckduckgo. Clock sync mobile & desktop.

Dan

 

[ATCclears]

@Mikej yup.

 

[Lasers]

I was down from 530 or so till after 610 with duckduckgo. Clock sync mobile & desktop.

Dan

Same here

 

[reblwing]

I can access the site bu typing in my browser. I have the link on my home page but that only takes me to a black page with nortwest firearms in the middle. At least I can still get in.

 

[Stomper]

I'm blaming ANTIFA... the skinny little dumb bastiges.