This site not using HTTPS...Why?

Talk about stuff specific to the site -- bugs, suggestions, and of course praise welcome.
Locked
User avatar
BobbyPhoenix
Posts: 280
Joined: April 24th, 2014, 5:58 am

This site not using HTTPS...Why?

Post by BobbyPhoenix »

So with the new release today when I went to login Firefox gave me the new popup that said the username and password fields are not secure. So why is that? Shouldn't MozillaZine be using HTTPS instead of just HTTP? I did notice the padlock in the address bar with the line through it before, but the popup really brought it to my attention. I feel very insecure logging in on a non HTTPS site.
Do, or do not. There is no try.
barbaz
Posts: 1504
Joined: October 1st, 2014, 3:25 pm

Re: This site not using HTTPS...Why?

Post by barbaz »

This has come up before - http://forums.mozillazine.org/viewtopic ... &t=2950805

The upshot is this. The admin is quite short on time. And this board has several other, more important issues, like people getting locked out -
http://forums.mozillazine.org/viewtopic ... &t=3026494
http://forums.mozillazine.org/viewtopic ... &t=3027921
http://forums.mozillazine.org/viewtopic ... &t=2824277

As for feeling very insecure? Just know the risk and take some simple steps to protect yourself. All the usual advice applies. Plus,
- don't log in when you're connected to an untrusted network, such as any shared WiFi you don't control, or a network you don't know the admin.
- And make sure that your password is very different from those you use on HTTPS sites.

Do that and you can feel better, you'll be fine. :)
User avatar
BobbyPhoenix
Posts: 280
Joined: April 24th, 2014, 5:58 am

Re: This site not using HTTPS...Why?

Post by BobbyPhoenix »

Thanks for the explanation, and links.
Do, or do not. There is no try.
barbaz
Posts: 1504
Joined: October 1st, 2014, 3:25 pm

Re: This site not using HTTPS...Why?

Post by barbaz »

You're welcome. 8-)
User avatar
therube
Posts: 21698
Joined: March 10th, 2004, 9:59 pm
Location: Maryland USA

Re: This site not using HTTPS...Why?

Post by therube »

(FWIW. Another board that recently went to the dark side, Please add SSL to the forum.)
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
User avatar
Mark12547
Posts: 327
Joined: May 13th, 2017, 11:36 am
Location: Oregon, United States, Earth

Re: This site not using HTTPS...Why?

Post by Mark12547 »

This board could also serve as a regression check to make sure that Firefox still notifies us that we are providing a password on an unsecured page. :)

The expected behavior now is that we are warned when supplying our password for this site, but not when we are supplying a password to our gateway device, which is usually a router.
flip101
New Member
Posts: 2
Joined: November 18th, 2017, 3:13 am

Re: This site not using HTTPS...Why?

Post by flip101 »

Yeah this is a strange situation ... when mozilla tries to make firefox more secure. A forum about firefox has no security at all ... Now i have to send my password unencrypted over the internet :( Randomly generated for just this website ... but still. Certificates are free these days, and installation shouldn't be too difficult ..
User avatar
Tony-E
Posts: 8778
Joined: November 5th, 2004, 11:28 am

Re: This site not using HTTPS...Why?

Post by Tony-E »

I use different passwords for every site, if this one get's compromised, not much will happen other than somebody could answer Firefox questions whilst pretending to be me.

Sites that store confidential info need the extra security, for a sites like this it is not essential.
User avatar
DanRaisch
Moderator
Posts: 127186
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Re: This site not using HTTPS...Why?

Post by DanRaisch »

Randomly generated for just this website ... but still.
Different passwords for each site (or type of site) is strongly recommended anyway. Sort of the opposite of using "password" as the password for every site.
Locked