New website is back

[VrBchJ]

I'm having this same problem with my Android. It doesn't trust the site certificate.

 

[erionm]

having problems getting on the dvc site. safari says it doesnt have the proper certificate and is invalid. googlechrome says people may be trying to get your info from this site. anyone else have this problem

No issues for me using Safari on iOS nor with Chrome on Windows.

What url are you using?

There is now a single url for DVC which combines the public information and links to member only information (member only portion requires log on): https://disneyvacationclub.disney.go.com/

 

[kstorms27]

IMO, its like putting lipstick on a pig! Site is basically the same with a few touch ups and some new color.

 

[castle1]

Safari is working fine for me, as well.

 

[howardlee2]

in chrome I can log in but not access any planning or booking areas! in IE I can access these areas but it's very slow!!! for a world class company Disney has dropped the ball here. this website is severely underpowered. I am no tech genius but they need to do better.... A LOT better!!!

 

[erionm]

in chrome I can log in but not access any planning or booking areas!

I can access those using Chrome for Windows.

 

[friendoffigment]

It appears Android doesn't trust the issuer of the dvc member site certificate, entrust. I'm guessing Apple may not either. Quick googling indicates this may be a common problem with entrust issues certs.

i am still having problems with safari and googlechrome. safari will not let me in at all. google will let me in but warns me its an unsafe site due to the invalidity of its certificate. both do not recognize the site.

 

[erionm]

i am still having problems with safari and googlechrome. safari will not let me in at all. google will let me in but warns me its an unsafe site due to the invalidity of its certificate. both do not recognize the site.

What url (address) are you using?

I'm not have any issues with Safari (windows or iOS) nor with Chrome (windows).

There is only one web address (url) now: https://disneyvacationclub.disney.go.com/

 

[KAT4DISNEY]

IMO, its like putting lipstick on a pig! Site is basically the same with a few touch ups and some new color.

I'd say it may not even be as good as that. It now takes extra clicks to get to a few things that used to be one.

I didn't like the layout for viewing vacations back when they first started showing that page a year or so ago. I had hoped the "new" site would be different but it's the same as then and it takes more clicks to see all reservations if you have more than a couple of rooms. Overall though it looks nice the function is worse for me.

 

[friendoffigment]

What url (address) are you using?

I'm not have any issues with Safari (windows or iOS) nor with Chrome (windows).

There is only one web address (url) now: https://disneyvacationclub.disney.go.com/

i am using the address you gave michael. on safari a window appears saying its not a valid site. i clicked on "show certificate". info comes up saying that "entrust authority" signed the certificate and it is not a trusted issuer and my personal info may be at risk. now it does say i can continue. google basically says same thing. issuer is not a trusted site and my personal info may be at risk.

 

[erionm]

i am using the address you gave michael. on safari a window appears saying its not a valid site. i clicked on "show certificate". info comes up saying that "entrust authority" signed the certificate and it is not a trusted issuer and my personal info may be at risk. now it does say i can continue. google basically says same thing. issuer is not a trusted site and my personal info may be at risk.

Mac, iOS or Windows? I'm not getting a certificate error when using iOS (safari & chrome) or a Windows PC (IE 11, Chrome & Safari).

 

[friendoffigment]

Mac, iOS or Windows? I'm not getting a certificate error when using iOS (safari & chrome) or a Windows PC (IE 11, Chrome & Safari).

strange. using Mac IOS. should i assume its safe since no one else is getting it. thanks michael

 

[Dean Marino]

Oh, I am very concerned....

I HIT the website at https://disneyvacationclub.disney.go.com/.... got right in. HOWEVER - it had been a good HOUR since I delivered my credentials at the MAIN Disney Web Site. The DVC website had NO BUSINESS letting me in without a security challenge after that long a period.

Second issue - near as I can tell, the certificate for the site has not been issued by any of the Major SSL Certificate authorities. This could ABSOLUTELY cause a world of issues, depending on the root certificate authorities that your device has been instructed to TRUST.

My opinion - this is third grade web hosting. Any major corporation should be using CERTs issued by Entrust, Thawte, SOME major root authority - not themselves, or "Bob's CERT Shop".

Just my opinion - be VERY CAREFUL OF WHAT YOU DO on this site until the SSL issues have been repaired by a COMPETANT person. Right now? I would CALL.

(Edit) dug deeper. In spite of AVAST not revealing the entire Certification path - it appears Disney DID go to ENTRUST. If so, any device instructed to honor ENTRUST Root Certs should not be having an issue.... unless someone, via poor coding, had introduced links that refer to a legacy domain name that is NOT "disneyvacationclub.disney.go.com". That's also pretty much a third grade web coding error.

(Edit 2) - they do INDEED have links leading to https://dvcmember.disney.go.com/news. Third grade at best - poor practice, as the site is not encapsulated within a single domain.

 

[friendoffigment]

Oh, I am very concerned....

I HIT the website at https://disneyvacationclub.disney.go.com/.... got right in. HOWEVER - it had been a good HOUR since I delivered my credentials at the MAIN Disney Web Site. The DVC website had NO BUSINESS letting me in without a security challenge after that long a period.

Second issue - near as I can tell, the certificate for the site has not been issued by any of the Major SSL Certificate authorities. This could ABSOLUTELY cause a world of issues, depending on the root certificate authorities that your device has been instructed to TRUST.

My opinion - this is third grade web hosting. Any major corporation should be using CERTs issued by Entrust, Thawte, SOME major root authority - not themselves, or "Bob's CERT Shop".

Just my opinion - be VERY CAREFUL OF WHAT YOU DO on this site until the SSL issues have been repaired by a COMPETANT person. Right now? I would CALL.

(Edit) dug deeper. In spite of AVAST not revealing the entire Certification path - it appears Disney DID go to ENTRUST. If so, any device instructed to honor ENTRUST Root Certs should not be having an issue.... unless someone, via poor coding, had introduced links that refer to a legacy domain name that is NOT "disneyvacationclub.disney.go.com". That's also pretty much a third grade web coding error.[/QUQ
when i just tried again on safari once again a window comes up saying the certificate is not recognizable and that i may be entering a site that is pretending to be disneyvacation..... and therefore my personal information may be at risk. again google chrome same thing. is it just my mac

 

[friendoffigment]

Oh, I am very concerned....

I HIT the website at https://disneyvacationclub.disney.go.com/.... got right in. HOWEVER - it had been a good HOUR since I delivered my credentials at the MAIN Disney Web Site. The DVC website had NO BUSINESS letting me in without a security challenge after that long a period.

Second issue - near as I can tell, the certificate for the site has not been issued by any of the Major SSL Certificate authorities. This could ABSOLUTELY cause a world of issues, depending on the root certificate authorities that your device has been instructed to TRUST.

My opinion - this is third grade web hosting. Any major corporation should be using CERTs issued by Entrust, Thawte, SOME major root authority - not themselves, or "Bob's CERT Shop".

Just my opinion - be VERY CAREFUL OF WHAT YOU DO on this site until the SSL issues have been repaired by a COMPETANT person. Right now? I would CALL.

(Edit) dug deeper. In spite of AVAST not revealing the entire Certification path - it appears Disney DID go to ENTRUST. If so, any device instructed to honor ENTRUST Root Certs should not be having an issue.... unless someone, via poor coding, had introduced links that refer to a legacy domain name that is NOT "disneyvacationclub.disney.go.com". That's also pretty much a third grade web coding error.

when i tried again i am advised that the certificate is unrecognizable and that i may be entering a site that is pretending to be disneyvacation..... therefore my personal info may be at risk. google basically says same. is it me mac

 

[WDWGeek1971]

I am trying to create my DVC account as a new member. It asks for "Club ID". Is that supposed to be the same as the "Member Number" on my membership card, or something else? Or am I just a victim of the site upgrade? Ouch.

 

[WDWGeek1971]

Oh, I am very concerned....


(Edit) dug deeper. In spite of AVAST not revealing the entire Certification path - it appears Disney DID go to ENTRUST. If so, any device instructed to honor ENTRUST Root Certs should not be having an issue.... unless someone, via poor coding, had introduced links that refer to a legacy domain name that is NOT "disneyvacationclub.disney.go.com". That's also pretty much a third grade web coding error.

(Edit 2) - they do INDEED have links leading to https://dvcmember.disney.go.com/news. Third grade at best - poor practice, as the site is not encapsulated within a single domain.

To call this third-grade is generous. I would fire them all if they were on my team. I might just be another DisneyGeek, but in my day job I am the VP of IT Operations for some critical web-based services and have over 20 years experience as a computer scientist and software developer. I just find it insulting to have to use the poop (not the dessert) that Disney IT and their contractors produce.

 

[Disneyepcot]

I am trying to create my DVC account as a new member. It asks for "Club ID". Is that supposed to be the same as the "Member Number" on my membership card, or something else? Or am I just a victim of the site upgrade? Ouch.

I called Member Services to get into the new website and they told me my problem was that I had not synced up my Disney Experience with the DVC Member site. He walked me through it and was able to tell me my Club ID which was an 8 digit number with a decimal point between the 7th and 8th digits. example(1234567.8)
Now that I have both accounts synced with the same sign in name and password I can get into the new website perfectly.

 

[erionm]

i am using the address you gave michael. on safari a window appears saying its not a valid site. i clicked on "show certificate". info comes up saying that "entrust authority" signed the certificate and it is not a trusted issuer and my personal info may be at risk. now it does say i can continue. google basically says same thing. issuer is not a trusted site and my personal info may be at risk.

This is what I see when I click on the lock next to the address in Chrome.

 

[DenLo]

I noticed that when sites makes changes google often doesn't like the new certificate.