Page 1 of 1

This site not using HTTPS...Why?

Posted: March 7th, 2017, 7:43 pm
by BobbyPhoenix
So with the new release today when I went to login Firefox gave me the new popup that said the username and password fields are not secure. So why is that? Shouldn't MozillaZine be using HTTPS instead of just HTTP? I did notice the padlock in the address bar with the line through it before, but the popup really brought it to my attention. I feel very insecure logging in on a non HTTPS site.

Re: This site not using HTTPS...Why?

Posted: March 7th, 2017, 9:18 pm
by barbaz
This has come up before - http://forums.mozillazine.org/viewtopic ... &t=2950805

The upshot is this. The admin is quite short on time. And this board has several other, more important issues, like people getting locked out -
http://forums.mozillazine.org/viewtopic ... &t=3026494
http://forums.mozillazine.org/viewtopic ... &t=3027921
http://forums.mozillazine.org/viewtopic ... &t=2824277

As for feeling very insecure? Just know the risk and take some simple steps to protect yourself. All the usual advice applies. Plus,
- don't log in when you're connected to an untrusted network, such as any shared WiFi you don't control, or a network you don't know the admin.
- And make sure that your password is very different from those you use on HTTPS sites.

Do that and you can feel better, you'll be fine. :)

Re: This site not using HTTPS...Why?

Posted: March 8th, 2017, 6:29 am
by BobbyPhoenix
Thanks for the explanation, and links.

Re: This site not using HTTPS...Why?

Posted: March 8th, 2017, 9:14 am
by barbaz
You're welcome. 8-)

Re: This site not using HTTPS...Why?

Posted: May 28th, 2017, 5:00 am
by therube
(FWIW. Another board that recently went to the dark side, Please add SSL to the forum.)

Re: This site not using HTTPS...Why?

Posted: August 10th, 2017, 1:07 pm
by Mark12547
This board could also serve as a regression check to make sure that Firefox still notifies us that we are providing a password on an unsecured page. :)

The expected behavior now is that we are warned when supplying our password for this site, but not when we are supplying a password to our gateway device, which is usually a router.

Re: This site not using HTTPS...Why?

Posted: November 18th, 2017, 3:19 am
by flip101
Yeah this is a strange situation ... when mozilla tries to make firefox more secure. A forum about firefox has no security at all ... Now i have to send my password unencrypted over the internet :( Randomly generated for just this website ... but still. Certificates are free these days, and installation shouldn't be too difficult ..

Re: This site not using HTTPS...Why?

Posted: November 18th, 2017, 4:49 am
by Tony-E
I use different passwords for every site, if this one get's compromised, not much will happen other than somebody could answer Firefox questions whilst pretending to be me.

Sites that store confidential info need the extra security, for a sites like this it is not essential.

Re: This site not using HTTPS...Why?

Posted: November 18th, 2017, 5:23 am
by DanRaisch
Randomly generated for just this website ... but still.
Different passwords for each site (or type of site) is strongly recommended anyway. Sort of the opposite of using "password" as the password for every site.