[Yulcat-l] FW: Secure login due to be rolled out Thursday evening, August 1st

[Arakawa, Steven]

Change in the Cataloger's Desktop URL beginning tomorrow.

Steven Arakawa
Catalog Librarian for Training & Documentation  
Catalog & Metada Services   
Sterling Memorial Library. Yale University  
P.O. Box 208240 New Haven, CT 06520-8240     
(203) 432-8286 steven.arakawa at yale.edu




-----Original Message-----
From: Cataloger's Desktop Forum [mailto:DESKTOP at LISTSERV.LOC.GOV] On Behalf Of Johnson, Bruce
Sent: Thursday, August 01, 2013 9:59 AM
To: DESKTOP at LISTSERV.LOC.GOV
Subject: [Desktop] Secure login due to be rolled out Thursday evening, August 1st

Colleagues:

As you know, 2013 Issue 3 of Cataloger's Desktop was released on July 16th. We had originally planned to include a security enhancement called "secure login" with Issue 3, but we ran into technical difficulties and opted for releasing the issue without it.

The remaining challenges have since been sorted out and secure login will be installed this evening. Work will begin at roughly 5 PM eastern time (2100 GMT) and is projected to take roughly 3 hours. During that time access to Cataloger's Desktop will be limited.

When you log into Cataloger's Desktop Friday morning you will notice a small but significant difference. Up to now, Desktop's web address has been http://desktop.loc.gov<http://desktop.loc.gov/> . The new address will be https://desktop.loc.gov . The only difference is that "http" is changing to "https", which is short for "Hypertext Transfer Protocol Secure." This is a communications protocol for secure internet communication. We are making this change to ensure that all logins and all customer information is encrypted to protect subscriber information from eavesdropping or tampering.

Aside from where Cataloger's Desktop lives on the internet, there are three changes that you should know:

1.  If you have built deep links to Cataloger's desktop using custom URLs (such as http://desktop.loc.gov/saved/Lcri_1.0E ), you may need to add the "s" to the link's updated target address (e.g. https://desktop.loc.gov/saved/Lcri_1.0E ). We have taken steps to preserve legacy links, but we recommend that you change your previously created Cataloger's Desktop links to ensure that they will continue to work.  All future links should be addressed to https://desktop.loc.gov/saved/ etc.

2.  There are a number of Cataloger's Desktop resources that are partially stored on Desktop's server, and partially accessed from the original host server (such as "NLM Policy on Subject Analysis and Classification"). With secure login, when you access any of these resources via Cataloger's Desktop, you may receive a security warning such as the one pictured at http://www.loc.gov/cds/desktop/graphics/warning.jpg . ("Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party. Are you sure you want to continue sending this information? Continue Cancel") This warning is simply alerting you that your information request is going from a secure https server to an http server. Most subscribers will click the "Continue" button to obtain the information they need.

3.  Subscribers who have recreated bookmarks on their browser to Cataloger's Desktop's http://desktop.loc.gov address will observe that the Desktop server will automatically refer them to https://desktop.loc.gov.

We regret the delay in implementing secure login. Please direct requests for additional information about secure login to CDS Technical Support at desktop-info at loc.gov<mailto:desktop-info at loc.gov> . Thank you for your continued support.

Bruce

Bruce Chr. Johnson
The Library of Congress
Policy & Standards Division
Washington, DC 20540-4263 USA

bjoh at loc.gov<mailto:bjoh at loc.gov>
www.loc.gov<http://www.loc.gov/>
202.707.1652 (voice)
202.707.6629 (fax)