sign in

[pianotuna]

I much preferred being able to view messages without having to sign in each and every time

[MastEvac71]

Each time I return to the forum I am still logged in and I use Chrome, Edge and firefox. No problems here.

[BobsYourUncle]

I use Firefox and have to log back in every day.

Not the end of the world, but certainly a pain in the rear.

[pianotuna]

Not sure this is a pm or not very poor imo

[BobsYourUncle]

I'm with you Don...

I find it a nuisance to have to sign in every time too.

OK, RV.Net was less secure, but seriously, don't hackers and crooks have better things to do than get into a bunch of "older folks" chit chat about RV related stuff? In the scheme of things nothing on the forum is life changing to others.

I stayed signed in to RV.Net for months, years, until I cleared cookies or did a fresh install of my OS to clean things up.

Oh well, I have the log in credentials saved so I don't have to enter it every time. It self populates for me at login.

[pianotuna]

Bob,

I find that if I close the window--and return I have to log in again.

I also find the board quite sluggish--even though at the moment I'm on a fibre connection at 500 m/s.

[opnspaces]

I'm able to view messages when not logged in. But of course I can't reply which is sometimes annoying but of course it makes sense.

[dedmiston]

Hey Don - Security on the old site was more lax than most. Security standards have evolved over the years, but RV.NET never kept pace.

I use a password manager on all of my devices and don't need to type my password to sign in. I can use my fingerprint or face to sign in on my laptop & iPad and my face to sign in on my phone. It's an extra step, but it was needed.

[Carl_n_Susan]

I think most of us are aware of, and use password managers and device security. But that affects our access point (phone, laptop, tablet, etc.) from outside users accessing it. I don't understand how using these tools protects the security of this G.S. forum.

G.S. states the timeout limit  is for their "security". What security is that? It doesn't appear their sign on security differs from before. Userid and password get you on. No TFA or equivalent.

[dedmiston]

The password requirements are more complex and there's no "Remember Me" to keep the session alive for days/months like on RV.NET.

And yes, it could be more secure through MFA, but do we really want to do that?

At least the session time-outs give us more protection against someone getting into one of our accounts with elevated permissions and deleting a bunch of posts or banning a bunch of accounts. It's not perfect, but it's more secure than the old site was.

[Carl_n_Susan]

As much as a PIA 2FA/MFA are, I absolutely want them on my financial apps. But for this forum (and other RV type forums): absolutely not.

Still, these things help identify us and ensure to G.S. that we are who we say we are. It does nothing to make the forum more secure. If I was worried about someone hijacking my session, either through my keyboard or intercepting my HTTPS connection, I would definitely logoff after every visit.

I just don't understand how a  timeout makes the G.S. forum more secure.