HTTPS a curse or a blessing...

As I mentioned in other, earlier threads, my plan was to ignore the HTTPS stuff because it simply hides the problem and it was only affecting my oldest listings.

 

However last week I got a fairly dramatic ebay message telling me immediate action was required on 380 of my listings. (however buried in the wording it said that I was "encouraged" to make the changes).

 

I called my buddies on the support desk but apparently a number of people were also wondering about these messages because I was awaiting a CSR for an hour....fortunately I was busy listing other items whilst on hold. 

 

I gave up after the hour wait, and never did talk to anyone, however I realized that that list of 380 items were the ones that pointed to my self hosted pictures.

 

Back in 1999 in the early days, one really had to do self hosting. In those days my needs were high in terms of storage space so I worked my way up to their largest plan over the next few years (simply because of the space needs)! 

 

Since then, a couple years ago I quit using self hosted pictures, but alas I was saddled with the "someday" job of finding all the listings that had the self hosted pictures, and converting the items to ebay hosted pictures before I could divest myself of the self hosting site.

 

Someday was probably never going to come, there is almost nothing I hate more than doing something over again!! However the annual fees for that site are over $350 Canadian.

 

However, the light bulb finally went off, ebay had inadvertently given me that master list of all the self hosted lots!

 

Sadly these suckers reach back to 2007 so there are a lot of things that need to be modernized in the descriptions etc. The good news is that as I am fixing them I'm correcting, upgrading the descriptions and categories which I think will help them move faster (they have been selling since I use a progressive "on sale" program with the oldest stuff most on sale).

 

It takes me about 5 or so minutes an item to do the conversion, so there's over 30 to 40 hours of work to convert them. 

 

However I'm consoling myself that a weeks work is going to save me $350 per year going forward so that is making things seem a little happier.

 

Anyway, I suppose I'd better get back to converting.....down to 277 left to convert!!!

Message 1 of 26
latest reply
25 REPLIES 25

HTTPS a curse or a blessing...

I think in the long run you will be happy to get it done!

 

One less thing to worry about.

Message 2 of 26
latest reply

HTTPS a curse or a blessing...

Neither a curse or a blessing.

 

https is a reality

 

All of my listings  became https compliant on the last day of September...

 

and ... At the beginning of October, it was like a fog lifted from sales

 

 

 

I finally did see what happens if a list is not https compliant......  Not a beautiful way to view a listing.

 

 

 

Hackers are getting better at what they do... and they will find a way to get on your computer  and make things happen whether good... or .. bad...

 

https code is just another way to make things more difficult for hackers...

Message 3 of 26
latest reply

HTTPS a curse or a blessing...


@cumos55 wrote:

Neither a curse or a blessing.

 

Hackers are getting better at what they do... and they will find a way to get on your computer  and make things happen whether good... or .. bad...

 

https code is just another way to make things more difficult for hackers...


Not really a hacking issue. The hacking issues at ebay were more about people being able to use actual code in their listing descriptions and thus abuse that. The https everywhere is just google enforcing their world view on everyone else. Any actual sensitive information like logins/cart level stuff has always been https secured.

 

Google gives better search ranking to sites that are completely https across the domain/subdomains. The padlock not showing secure where there was mixed http/https (literally the internet since...forever) was a relative new change google wanted to push through.

Message 4 of 26
latest reply

HTTPS a curse or a blessing...

Here is a link to the reason for use of https.....

 

https://en.wikipedia.org/wiki/HTTPS

 

and from this site...

 

HTTPS creates a secure channel over an insecure network. This ensures reasonable protection from eavesdroppers  and  man in the middle attacks provided that adequate cipher suites are used and that the server certificate is verified and trusted.

 

Also from Wikipedia...

 

security hacker is someone who seeks to breach defenses and exploit  weaknesses in a computer system or network.

 

They call it man-in-the-middle attacks.  Ultimately this attack, that https prevents,  could be a way for someone to gain access into somewhere that should be secure... an unacceptable action.

Message 5 of 26
latest reply

HTTPS a curse or a blessing...

many who have a computer  use it without an understanding that the internet is full of watchers.

 

If a computer is hooked up to the internet... there are all kinds  of programs that come from the internet and are  on each  computer..  All these programs do is watch and record what we do.

 

Many are not dangerous  to the owner of the computer.

 

But there will always be that something that finds a back door  and then  the owner of the computer is in trouble.....

 

A computer can be cleaned of these programs... but they will get back on the computer   again and again.

 

 

Hacking is the finding of some important information... finding the back door...  and the owner of the computer is in trouble...

 

The use of https is just another way to protect us from  being invaded...

 

The use of https... and the security of websites will increase....

 

But then.... those wanting to gain access... the hackers....  will find the back door....

 

We the user of computers must  understand that we must be internet savvy.....  and internet secure

 

 

Message 6 of 26
latest reply

HTTPS a curse or a blessing...


@ricarmic wrote:

As I mentioned in other, earlier threads, my plan was to ignore the HTTPS stuff because it simply hides the problem and it was only affecting my oldest listings.

However last week I got a fairly dramatic ebay message telling me immediate action was required on 380 of my listings. (however buried in the wording it said that I was "encouraged" to make the changes).

 

Sadly these suckers reach back to 2007 so there are a lot of things that need to be modernized in the descriptions etc. The good news is that as I am fixing them I'm correcting, upgrading the descriptions and categories which I think will help them move faster (they have been selling since I use a progressive "on sale" program with the oldest stuff most on sale).

 

 


Yes, I got one of those sinister-sounding emails from eBay too.  Any time an email arrives from eBay that includes the words "policy violation", it's time to pay attention.  Like you, I had been under the impression from eBay's original announcements that this was recommended, but wasn't going to be mandatory, at least not immediately.  It appears otherwise. 

 

I have far fewer old listings to clean up than you, but you're right that it does create an opportunity to refine and improve those languishing listings to help sell them. 

 

One other point I thought I'd mention (aside from the obviously important security considerations that 'cumos' brought up) is that I looked at a few of those listings on a friend's mobile device.  The entire description area was missing, replaced by a link to "see full description".  In some categories, especially where items are mass-produced and consistent, the Item Specifics are probably sufficient, but in my world (and likely yours as well), a detailed description of a OOAK item is important.  

 

A tangential thought -- I wonder if eBay would have done anything about this security issue had Google not imposed it on them? 

 

In my case, since there are only about 30 such listings involved, I'll probably just end them all and start over from Auctiva, where I know absolutely everything will be checked and compliant before I upload to eBay. 

 

Always more busy-work on eBay... Woman Very Happy

Message 7 of 26
latest reply

HTTPS a curse or a blessing...

rose--

Double check the first  revamped listing before you do any more.

If Auctiva leaves any bits of code in your listing you will be right back where you started.

I had removed something, so long ago I have no idea what it was, and all that was (barely) visible was a white dot on the pink background I use for my 'branding'.

That was actually a line of code.

If it had been white on white I would not have seen it.

 

I was removing the non-compliant stuff from the HTML version, or I would never have known what the problem was.

 

 

 

Message 8 of 26
latest reply

HTTPS a curse or a blessing...


@rose-dee wrote:

A tangential thought -- I wonder if eBay would have done anything about this security issue had Google not imposed it on them? 

 

In my case, since there are only about 30 such listings involved, I'll probably just end them all and start over from Auctiva, where I know absolutely everything will be checked and compliant before I upload to eBay. 

 

Always more busy-work on eBay... Woman Very Happy


Ebay would have been fine security-wise. They are setup like every other internet site/business that collects user information/payment details are, SSL where needed. The reason for updating is simply because the padlock warning appears in the chrome address bar when a site has mixed http/https (perfectly normal) content implying to the user that there is a security issue when there really isn't one.

 

For most people it's just a matter of ensuring the external links in their descriptions are compliant and that their listing service generates compliant links for anything it converts/displays as html links. You are best off copying any text from the description fields in your listing service into a text editor (like windows notepad) and ensuring it doesn't have any extra code in there that you are not expecting. The description fields as shown on many listing services are not actually raw text, and you may have to load the "source" version of the description to see what is actually there.

 

If only any of this busywork would generate new sales.

Message 9 of 26
latest reply

HTTPS a curse or a blessing...

With respect to Auctiva....

----------------------

If  you have an eBay advertisement added to the end of your Auctiva description

 

Click on the ...Source ... option at the very top left of the description when you are working on your listing.

 

The description will show in HTML... and all http will become visible.... add an "s"  and have https

------------------------------

 

I ended each and every one of my Auctiva listings.....  in doing so all of my photos in my listings  were converted to https.

 

 

My photos for Auctiva listings are stored on the Auctiva site...... and before I started a revision of listings....  I checked and saw all of my photos had https

 

One can also do a bulk edit of active listings on eBay  from the Auctiva  site....... but the edit is for the description only....  Any http will be edited including the eBay advertisement...the footer.....because it is a part of the description.

Message 10 of 26
latest reply

HTTPS a curse or a blessing...

218 to go, will be a couple weeks yet likely..... 😞 

Message 11 of 26
latest reply

HTTPS a curse or a blessing...

Sorry if this is a stupid question...

If I want to use an img arc http code to link to an image stored on auctiva, would it be considered “insecure”? I used to link to photobucket, well in fact I still link to it since I have been too lazy to fix my listings... I’m wondering if that’s what’s triggered eBay to send me these nasty https emails...

 

i thought auctiva has updated to no active content but some of my listings still get flagged by eBay by having active content... and no, I don’t really want to redo so many listings... 

Message 12 of 26
latest reply

HTTPS a curse or a blessing...

Some of your listings contain an eBay advertisement at the end of a listing... They are called footers.

 

I found that an  eBay footer had http....... look at your description using  the HTML option  when a listing is revised, and see if that footer has http or https

 

Your use of Auctiva allows you to bulk edit your active listings on eBay.

 

It took me a few hours to do my listings... all 4200 listings....Now all of my listings do not have http

 

All of the images stored on Auctiva had the https code.....Evidently they has been converted.  The only way I could change this http to https  on for photos in  active listings was to end the listings and upload a new listing from Auctiva 

 

A bulk edit does not change the http to https on a photo..... In my situation I could only edit the description using Auctiva's bulk edit option of active listings on eBay.

 

Starting out with a new Auctiva listing also allowed a seller to adjust to a new template that is mobile app responsive...

 

-------------------------------------------------------

 

eBay has provided a way to identify and remove active content...

 

https://ocsnext.ebay.ca/ocs/sc

 

Find out what is being identified as active content and then find a way to remove it

 

------------------------------------------------------

 

 

Unless you have other selling ID on eBay,  your 149 listings should  be s quick and easy edit

 

 

--------------------------

 

Removal of active content means mobile app users will have no problem viewing your listings.

 

editing http to https  will stop listings from being identified as non-secure... today this occurs on eBay.com.... and eventually on all countries, including Canada, on eBay

 

----------------------------------

 

All 4200 of my listings

 

--- have no active content

 

--- have mobile app responsive Auctiva templates

 

---have had all http converted to https

 

--- also ... No links...... I did have a few in listings .... all from several years ago... two from 2011

 

It took a while    ... but... everything got done.  And most important sales appeared to have been stimulated after having done everything....  Being very careful  and very systematic helped.....

 

and most important... sales continued  and were not influenced during my period of adjustment

 

Message 13 of 26
latest reply

HTTPS a curse or a blessing...

Down to 189 left to convert.....WOO HOO half done......
Message 14 of 26
latest reply

HTTPS a curse or a blessing...

This whole thing has been blown way out of proportion.

 

According to my web site host, the problem occurs when someone using an incognito Chrome browser happens on a site that collects data.

If you don't want their cookies, the "insecure" notice from Google is a warning that cookie givers be there.

 

As usual eBay took the blanket approach to this problem and banned all hyperlinks and images in the description.

One can still use self hosting of images in their listings pasted into the image section.

My high speed is not so high and it would take forever to find the images and upload them while I'm trying to list a new item.

Even when using my FTP I sometimes give up and come back later since it keeps timing out. 

 

I was not happy about the notice. Especially when they threatened to ban my listings if I did not comply.

My background colors, logos, and other images that made my 4 sites unique all had to be edited.

Came up with a quick fix, duplicate, paste in new coding, leave a mark in the custom label, open original listing, copy text, close, open edit, paste, growl.  It still took four week for 3,000 listings to be made sterile for no reason at all.

I do not give cookies. 

 

 

Message 15 of 26
latest reply

HTTPS a curse or a blessing...

Done.

 

And I took the opportunity to end a dozen items that are probably unsaleable.

 

Now if I can just figure out why eBay won't accept my listing of the Firefly Loot Crate #6 (Saffron/ Christina Hendricks) I will have had a productive day.

Message 16 of 26
latest reply

HTTPS a curse or a blessing...

I do you known about that Ebay Tools may be it would help you  go take a look

 

http://www.isdntek.com/ebaytools/ActiveContentScanner.htm

Message 17 of 26
latest reply

HTTPS a curse or a blessing...

Yep my main goals from the conversion effort are to upgrade the listing content (some are 10 years old) and to ultimately divest myself of my self hosting site (by migrating the pictures onto the ebay listings).

The divesting of self hosting is a manual process anyway, so I'm spending the time to upgrade the rest.
Message 18 of 26
latest reply

HTTPS a curse or a blessing...


@the_d_consortium wrote:

This whole thing has been blown way out of proportion.

 

According to my web site host, the problem occurs when someone using an incognito Chrome browser happens on a site that collects data.

If you don't want their cookies, the "insecure" notice from Google is a warning that cookie givers be there.

 

As usual eBay took the blanket approach to this problem and banned all hyperlinks and images in the description.

One can still use self hosting of images in their listings pasted into the image section.

My high speed is not so high and it would take forever to find the images and upload them while I'm trying to list a new item.

Even when using my FTP I sometimes give up and come back later since it keeps timing out.  


The insecure notice is google warning that an SSL certificate isn't in place and that data isn't encrypted and sent over the https protocol. Google will trigger that warning when you have a site that takes user form data (logins, payment details, etc) and there isn't an SSL cert in place covering the domain and all subdomains, or there is mixed http/https content (links or image assets for example). Ebay as it was setup was fine security-wise. Google is simply trying to force every website to switch to using SSL certs as there are bad/negligent actors that do not secure pages where user information is gathered. In the past you just got an SEO (ranking) boost by having a SSL cert in place, and now they are moving to blacklisting sites that gather user data and do not use a secure protocol for doing so. Get an SSL cert in place is only part of securing a website. EBay's biggest problem in the past is that they allowed people to have custom code in descriptions which allowed jerks the ability to do things like redirect you to phishing pages that were fake ebay login pages designed to steal your login data. Transaction data has always been done in a secure manner.

 

Link issues are twofold and should be seen as distinct, one to ensure all links are https so that mixed https/http content doesn't trigger the google browser warning and two to remove any possibility of "off site" transactions. When you have assets (links, images, etc) that are delivered over http while your site has an SSL certificate that is considered mixed content and triggers the google warning. Normally with a website you would just use a plugin to do automated rewrites of http to https but I suspect ebay wanted to ensure all service providers updated their ends to have all content delivered over https and to use the opportunity to force sellers to get rid of anything that ebay thinks you might be doing to direct people off the site. Ebay hasn't made that distinction as clear as it could be, hence you get a lot of people confused on what they need to be changing.

Message 19 of 26
latest reply

HTTPS a curse or a blessing...


@ricarmic wrote:
Yep my main goals from the conversion effort are to upgrade the listing content (some are 10 years old) and to ultimately divest myself of my self hosting site (by migrating the pictures onto the ebay listings).

The divesting of self hosting is a manual process anyway, so I'm spending the time to upgrade the rest.

If nothing else the money saved there in the long run will help you out. The one positive side of this is it forced me to switch to a listing provider that was actually a much better workflow in the end.

Message 20 of 26
latest reply