First Choice Security

FIRST General Forum
1

Has anyone noticed the lack of HTTPS on the First choice site? I wanted to add our payment info but wont without it.

2

That’s odd…

3

Looks fine to me…

4

I attempt to visit the page with HTTPS Everywhere, it redirects to the non-HTTPS page. I go directly to the HTTPS page, it redirects to HTTP.

Attempting to connect using wget (to diagnose) it reflects as much as well.

wget "https://firstchoicebyandymark.com"
--2017-11-18 19:04:52--  https://firstchoicebyandymark.com/
Resolving firstchoicebyandymark.com (firstchoicebyandymark.com)... 72.52.207.65
Connecting to firstchoicebyandymark.com (firstchoicebyandymark.com)|72.52.207.65|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://firstchoicebyandymark.com/ [following]
--2017-11-18 19:04:52--  http://firstchoicebyandymark.com/
Connecting to firstchoicebyandymark.com (firstchoicebyandymark.com)|72.52.207.65|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 77 [text/html]
5

I’ve only been able to get the login page to https - everything else redirects to http.

6

I cant even get the login page. I have tried from different networks (Home + Work)

7

Does this link work? I’ve tried it in both Chrome and Edge and it appears to work just fine.

8

I can confirm also that I cannot access the site over HTTPS.

9

I clicked that link and it brings me to login page on HTTPS.
But when I click off of it and then back onto the login page it is not using HTTPS.

10

it gave me https for the entire site. something odd is going on here.

11

In this day and age there’s little reason for most any site to not be https by default (and force redirect to the secure site for all pages).

Something AM should look into.

12

Its seems as though if you manually type in the url https://firstchoicebyandymark.com/login you will get HTTPS

But if you visit the site with the non https url
http://firstchoicebyandymark.com/login you will not get https. Same goes if you click the login button, you will not get https. Note you need to close the tab or browser to try this otherwise if you already had an HTTPS url it will maintain.

So something is not working right but you can get it if you do it manually.

13

:ahh: Oops!

Thank you for bringing this to our attention. It was a simple setup mistake that has now been taken care of.

You should see a green padlock when on the login page, your account pages or any page where you enter your credit card. ::safety::

::rtm:: As always feel free to contact our team at firstchoice@andymark.com for any issues you have and we’ll do our best to solve them.

14

Thanks Jerry !

15