"Your connection is not private"

[Dufflebags]

So big DnD fan, wanted to try this out.

But when I got to make my account I get halted with the above message, warning that my information might get stolen if I log into this site.... Does anyone else experience this? What kind of shenanigans are these really?

[Longhaul]

From Running-Target on another thread..

forum research here > https://www.ddo.com/forums/forumdisplay.php/105-Service-and-Support

Manage your Standing Stone Games account here > https://myaccount.turbine.com/index.php

Sign up here for new account > https://signup.ddo.com/ddo.php?ftui=DDOBlackDragon&abrs=100_1532982278

SSG CC > https://help.standingstonegames.com/hc/en-us/

If you are having problems making an account on the website:
- Try different web browsers like Internet Explorer or Edge, etc.
- Make sure adblocker extentions are disabled and turn web scripts blockers off.
- Make sure Javascript is On in the browser you are using.
- Open a fresh browser, Type DDO.com in the URL bar and enter, click on Register link at top right corner of page.
- It has a ReCaptcha thing that you have to check to complete the account, if you fail the reCaptcha, your signup fails.
- It has a Terms of Service and Privacy Policy Check mark that you have to complete for new account.
- Valid passwords are between 6 and 16 characters with at least one number and cannot contain apostrophes.
- Make sure you have confirmed the password.
- Make sure you put in an Email address that has not been used for any Turbine account.
- Make sure you have put in the date of your birth.
- Make sure your Username is unique to you. Maybe if you trying to use a common username it will fail without notice.
- If you are still failing, be aware SSG blocks IPs from certain regions of the world, try using a VPN to sign up, you can play without the VPN.
- Make sure you are using an email address that will stay with you where ever you go, like a website email service and make sure they don't close that email address from lack of use or no payment.
- Make sure your email account is Not send mail from DDO to the spam or blocking it.
- Try making account at different times, or keep trying, if it fails. Maybe website is too busy or Down at that time.

[Lagy_Paladin]

I got the warning to for the turbine account site as well, its legit. (unless your on a different one that also is giving the warning)

[Doug]

What software is producing the warning?

Usually that message simply means that secure protocols like HTTPS are not in use.
Sometimes even when they are, it'll occur if the site certificate is invalid.

[NavFamG]

Originally posted by Doug:

What software is producing the warning?

Usually that message simply means that secure protocols like HTTPS are not in use.
Sometimes even when they are, it'll occur if the site certificate is invalid.

Yesterday when someone was having trouble creating an account I was checking on it - he was using DDO/signup site, so I too clicked on the turbine one like Lagy did and got the same warning.

Now my anti-virus is StopZilla but I think it was just the windows firewall that alerted on it.

Could be just because it was a Turbine one and not kept up anymore.

[Doug]

Originally posted by NavFamG:

Originally posted by Doug:

What software is producing the warning?

Usually that message simply means that secure protocols like HTTPS are not in use.
Sometimes even when they are, it'll occur if the site certificate is invalid.

Yesterday when someone was having trouble creating an account I was checking on it - he was using DDO/signup site, so I too clicked on the turbine one like Lagy did and got the same warning.

Now my anti-virus is StopZilla but I think it was just the windows firewall that alerted on it.

Could be just because it was a Turbine one and not kept up anymore.

Yeah. That'd probably be Chrome. That wording sounds familiar. But SSL issues or site certificate are the most common causes.

[Dufflebags]

Originally posted by Doug:

What software is producing the warning?

Usually that message simply means that secure protocols like HTTPS are not in use.
Sometimes even when they are, it'll occur if the site certificate is invalid.

Interesting enough one of the warnings mentioned their certificate was expired by 144 days.

[Lagy_Paladin]

Yes I think its a chrome only thing

[Dufflebags]

Originally posted by Lagy:

Yes I think its a chrome only thing

Just tried on microsoft and it didn't work either. This is real shady honestly.

[drunken.dx]

Originally posted by Dufflebags:

Originally posted by Lagy:

Yes I think its a chrome only thing

Just tried on microsoft and it didn't work either. This is real shady honestly.

My suspicion is that someone at SSG is tardy when it comes to certificate renewal (taking into account that they don't even check Steam discussions, that's very likely).

And browsers in general can be overzealous. (not that extra caution is bad, on the contrary)
I recall getting "suspicious site" message once when going to Youtube.

I personally never saw anything like that, although I use Firefox.

[Doug]

Originally posted by drunken.dx:

My suspicion is that someone at SSG is tardy when it comes to certificate renewal (taking into account that they don't even check Steam discussions, that's very likely).

Either that or the website being accessed isn't the current one.

Originally posted by Dufflebags:

Just tried on microsoft and it didn't work either. This is real shady honestly.

What URL?

Originally posted by Lagy:

Yes I think its a chrome only thing

The error's probably Chrome-specific, but other browsers should also check and mention if the site certificate is out of date. It's not actually a problem if you're on the legit site, but it can indicate a spoofed one.

[Dufflebags]

Originally posted by Doug:

Originally posted by drunken.dx:

My suspicion is that someone at SSG is tardy when it comes to certificate renewal (taking into account that they don't even check Steam discussions, that's very likely).

Either that or the website being accessed isn't the current one.

Originally posted by Dufflebags:

Just tried on microsoft and it didn't work either. This is real shady honestly.

What URL?

Originally posted by Lagy:

Yes I think its a chrome only thing

The error's probably Chrome-specific, but other browsers should also check and mention if the site certificate is out of date. It's not actually a problem if you're on the legit site, but it can indicate a spoofed one.

https://myaccount.standingstonegames.com/?billing%5Btarget_lang%5D=en

That's the address the launcher takes you to register your account. I just tried again today on google. Received this detailed message about it in advanced after being stopped again :

This server could not prove that it is myaccount.standingstonegames.com; its security certificate expired 4 days ago. This may be caused by a misconfiguration or an attacker intercepting your connection. Your computer's clock is currently set to Thursday, March 26, 2020. Does that look right? If not, you should correct your system's clock and then refresh this page.

Now I'll try internet explorer. I get a similar message:

This might mean that someone’s trying to fool you or steal any info you send to the server. You should close this site immediately.


Go to your Start page
Details
The website’s security certificate is not yet valid or has expired.
Error Code: DLG_FLAGS_SEC_CERT_DATE_INVALID
Go on to the webpage (Not recommended)

[Dufflebags]

I'm sure it's probably nothing really. But ultimately it looks to me like either it's some strange personal problem on my end, or someone over there isn't really doing their homework.

I'd like to try the game buy bypassing the security message and getting AIDS seems like a bad move. I could download a different browser, but I'm not sure that's really fixing the problem by going around it. Am I still in a compromised position using mozilla?

Kinda suprised in 2020 things aren't compatible with chrome. I remember early days needing mozilla but I haven't honestly needed or used it since ... like... 2012?

[Doug]

Originally posted by Dufflebags:

I'm sure it's probably nothing really. But ultimately it looks to me like either it's some strange personal problem on my end, or someone over there isn't really doing their homework.

I'd like to try the game buy bypassing the security message and getting AIDS seems like a bad move. I could download a different browser, but I'm not sure that's really fixing the problem by going around it. Am I still in a compromised position using mozilla?

Kinda suprised in 2020 things aren't compatible with chrome. I remember early days needing mozilla but I haven't honestly needed or used it since ... like... 2012?

Not a compatibility problem. An invalid (4 day out of date) site certificate is actually a pretty common issue. And usually doesn't mean anything's wrong except that someone isn't on top of it (not too shocking what with the pandemic).

But worth reporting so they fix it.

[Dufflebags]

Originally posted by Doug:

Originally posted by Dufflebags:

I'm sure it's probably nothing really. But ultimately it looks to me like either it's some strange personal problem on my end, or someone over there isn't really doing their homework.

I'd like to try the game buy bypassing the security message and getting AIDS seems like a bad move. I could download a different browser, but I'm not sure that's really fixing the problem by going around it. Am I still in a compromised position using mozilla?

Kinda suprised in 2020 things aren't compatible with chrome. I remember early days needing mozilla but I haven't honestly needed or used it since ... like... 2012?

Not a compatibility problem. An invalid (4 day out of date) site certificate is actually a pretty common issue. And usually doesn't mean anything's wrong except that someone isn't on top of it (not too shocking what with the pandemic).

But worth reporting so they fix it.

Fair enough. Game isn't really of enough interest for me to work that hard at this point.

Thanks for your help.

[Soap]

It’s only an issue if you’re not sure if you’re on a legit site, which in this case is really easy to see. In any case, you’re not entering any financial information or passwords for other accounts there so it would be a huge waste of time for someone to spoof it. If you’re really that worried about it just change the password after you create the account. Then there’s no chance anyone can try DDO for free by using your account, they’d have to actually create one themselves which would take less time than spoofing the account creation page.