XF 2.0 Gmail: Suspicious Link in Verification Email

[Thomas_A]

Hi all,

I am a new customer of XenForo and wow, this forum software is amazing. I absolutely love it. I just created a forum that requires users to verify their email address, and one new member messaged me on another site telling me Gmail alerted him to the verification URL being suspicious. Here's a screenshot.


Now I understand it may not be XenForo related, but it's a new domain and I haven't heard of anybody else having this issue on the forum. Any advice on what I can do?

Thanks

 

[Chris D]

I can't find anything conclusive other than this has indeed been asked by many people and no one has received what I can see is a definitive answer.

Some suggest the issue just goes away; so that might suggest it's just down to how much Google "trusts" your domain (which if it's brand new, then maybe that's why). Some suggest that it might be because your site isn't served over HTTPS (I think yours is, but make sure that your board URL is and the link in the email is).

Aside from that, indeed this is a quirk within Gmail and so there's likely little we can do to help from a software perspective. There is a Gmail help forum which might be worth posting in but I warn you, the threads I've seen on this subject haven't been very helpful!

https://productforums.google.com/forum/#!forum/gmail

 

[Sandman RSS Feed]

I assume your site is http and not https? If do that is why they will get that warning.

 

[Thomas_A]

I can't find anything conclusive other than this has indeed been asked by many people and no one has received what I can see is a definitive answer.

Some suggest the issue just goes away; so that might suggest it's just down to how much Google "trusts" your domain (which if it's brand new, then maybe that's why). Some suggest that it might be because your site isn't served over HTTPS (I think yours is, but make sure that your board URL is and the link in the email is).

Aside from that, indeed this is a quirk within Gmail and so there's likely little we can do to help from a software perspective. There is a Gmail help forum which might be worth posting in but I warn you, the threads I've seen on this subject haven't been very helpful!

https://productforums.google.com/forum/#!forum/gmail

Hi Chris,

I did a quick Google search before posting and as far as I could see, the Google "trust" thing appeared to be the most likely cause although I thought perhaps it's something I've configured incorrectly. I have checked over the settings and I believe everything is set to https, I spent some time when setting it up to ensure it was done correctly (ie http -> https, www to non www).

Is there a specific setting where I can see if the verification email link is https (other than signing up)?

I assume your site is http and not https? If do that is why they will get that warning.

Site is https.

Thanks both for the speedy reply!

 

[Chris D]

I thought I'd just register myself to see. The link in the email is https so that's good. But, interestingly, I didn't get a warning when I clicked the link through my Gmail account.

I'd just ride it out, I suspect as time goes on Google will just "trust" you more.

 

[Thomas_A]

I thought I'd just register myself to see. The link in the email is https so that's good. But, interestingly, I didn't get a warning when I clicked the link through my Gmail account.

I'd just ride it out, I suspect as time goes on Google will just "trust" you more.

Thanks for testing that out for me Chris. I signed up myself but of course triggered the manual approval as I am already a user (d'oh).

Appreciate your help! Keep up the great work with XenForo, it is worth every penny! Seriously impressed.