Integrated Login with RV Life Network Sites

[Janet H]

Keystone Forums is implementing a new login system to make accessing this and other RV LIFE sites simpler.

Starting Tuesday, April 23, you may notice a change as you login into the forum IF you also have an account at one of these RV Life sites:


5th Wheel Forums
Air Forums
Campground Reviews (formerly RV Park Reviews)
Class B Forum
CrossRoads Owners Forum
Dutchmen Owners Forum
Escape Forum
Fiberglass RV Forum
Forest River Forums
Funfinder Owners Club Forum
Gulf Stream Owners Forum
Hi-Lo Trailer Forum
iRV2.com Forum
Jayco Owners Forum
Luxury Coach Lifestyle Forum
Montana Owners Club Forum
Open Roads Radio Forum
Redwood Owners Forum
RV Trip Wizard
Skoolie.net Forum
Sportsmobile Forum
Sunline Owner's Club Forum
Thor Forums
Truck Conversion Forum
Winnie Owners Forum



The login process will walk you through the process of logging in with your RV LIFE credentials.

As you login you will see a notice about this and some options to select or reset your password. You will then be able to login to these other RV LIFE sites (if you have an account set up at that site) with the same email and password. If you update your password here, it will also change the login info for these other RV LIFE sites.

RV LIFE is the parent network of several RV and camping related sites and many members here have accounts at other RV Life sites. Your username and account profile will be unique on each site but the login info (which is private) will be unified. As more sites are added to the single login option, we'll let you know.

While we are making this update the site will be unavailable for a couple of hours during the wee small hours of the morning. Hopefully you will never notice the downtime.

For more information please see:
http://www.keystoneforums.com/forums/misc.php?do=rvlife_page

:)

[Janet H]

Just bumping this as it takes effect tomorrow.

[hankaye]

Janet, Howdy;

Today it's my password ... took the time to change it just so I could post this.
I joined the reviews when I was looking for places, maybe 8 or 9 years ago. Haven't used it since. Found out either the information was sadly out of date or
just flat wrong.
Another thing that I think was mentioned was that the changes were to give better protection (SECURITY), to the site. Well the informational on the address line, you know, up where we type in the site address has changed from an i inside a circle (pre change), to what we have now RED triangle with an ! inside of it. Below is a link that states that;
To check a site's security, to the left of the web address, look at the security status:
(A padlock is shown), Lock Secure
(Circle with i inside shown), View site information Info or Not secure
(RED Triangle with ! inside shown), Dangerous Not secure or Dangerous

https://support.google.com/chrome/answer/95617?visit_id=636917539740517914-3139874264&p=ui_security_indicator&rd=1

The amount of SPAM that I have been receiving has been becoming larger
each week, correlation, ... perhaps, ... perhaps not ... just interesting.

How many folks have had to change their comfort of a known user name and password across all these sites just to make it easy for a few folks (Admin.s)

hank

[Janet H]

The login pages here are now secure (httpS) but as noted, the rest of the site is not. We store no financial info or other sensitive content here and we long ago changed login pages (where password data is passed) to meet current security standards.

The primary reason for not changing the rest of the site is that we have thousands of links in posts to offsite images and content that are not https. ALL those links would break. As the www updates it will be easier to make this change but for now we would rather retain that content then break it.

Last year google began to push websites to use https instead of http as a security update. A few months ago they began to actually began to display that little red triangle;"not secure" on browser address lines.

We hand coded an update to make the LOGIN page https. This is the page where user credentials are passed and the only sensitive data we store. Once a member has logged in the site reverts to http (and the alert begins to display in browsers). Using https on all pages actually breaks some things the forum. Offsite links and hosted images no longer work, ads don't display, photos, etc.

So... as you login the page is secure (https) but once you have logged in the regular site is http. Since no login/pass info is being sent on these pages we believe this is safe and reasonable. There's little we can do to change this until we move to a new forum software platform which eventually we will have to do.

You can read more about the google alerts here: https://www.wired.com/story/google-chrome-https-not-secure-label/

[hankaye]

Janet, Howdy;

I'm sure that all the intentions are aimed at the Greater Good. But what really bugs me the most is the fact that instead of following the Internets own Best practices of one site one password / username. Here y'all have combined 16 points of access to a single combination there-by allowing potential bad guys
a whole lot of access for 1(one), lucky guess. :facepalm:
Here's another link, scroll to page 2 Item 5 ;

https://www.nsa.gov/Portals/70/documents/what-we-do/cybersecurity/professional-resources/csi-best-practices-for-keeping-home-network-secure.pdf

hank