This site not using HTTPS...Why?

[BobbyPhoenix]

So with the new release today when I went to login Firefox gave me the new popup that said the username and password fields are not secure. So why is that? Shouldn't MozillaZine be using HTTPS instead of just HTTP? I did notice the padlock in the address bar with the line through it before, but the popup really brought it to my attention. I feel very insecure logging in on a non HTTPS site.

[barbaz]

This has come up before - viewtopic.php?f=11&t=2950805

The upshot is this. The admin is quite short on time. And this board has several other, more important issues, like people getting locked out -
viewtopic.php?f=11&t=3026494
viewtopic.php?f=11&t=3027921
viewtopic.php?f=11&t=2824277

As for feeling very insecure? Just know the risk and take some simple steps to protect yourself. All the usual advice applies. Plus,
- don't log in when you're connected to an untrusted network, such as any shared WiFi you don't control, or a network you don't know the admin.
- And make sure that your password is very different from those you use on HTTPS sites.

Do that and you can feel better, you'll be fine.

[BobbyPhoenix]

Thanks for the explanation, and links.

[barbaz]

You're welcome.

[therube]

(FWIW. Another board that recently went to the dark side, Please add SSL to the forum.)

[Mark12547]

This board could also serve as a regression check to make sure that Firefox still notifies us that we are providing a password on an unsecured page.

The expected behavior now is that we are warned when supplying our password for this site, but not when we are supplying a password to our gateway device, which is usually a router.

[flip101]

Yeah this is a strange situation ... when mozilla tries to make firefox more secure. A forum about firefox has no security at all ... Now i have to send my password unencrypted over the internet Randomly generated for just this website ... but still. Certificates are free these days, and installation shouldn't be too difficult ..

[Tony-E]

I use different passwords for every site, if this one get's compromised, not much will happen other than somebody could answer Firefox questions whilst pretending to be me.

Sites that store confidential info need the extra security, for a sites like this it is not essential.

[DanRaisch]

Randomly generated for just this website ... but still.

Different passwords for each site (or type of site) is strongly recommended anyway. Sort of the opposite of using "password" as the password for every site.