This site not using HTTPS...Why?
- BobbyPhoenix
- Posts: 280
- Joined: April 24th, 2014, 5:58 am
This site not using HTTPS...Why?
So with the new release today when I went to login Firefox gave me the new popup that said the username and password fields are not secure. So why is that? Shouldn't MozillaZine be using HTTPS instead of just HTTP? I did notice the padlock in the address bar with the line through it before, but the popup really brought it to my attention. I feel very insecure logging in on a non HTTPS site.
Do, or do not. There is no try.
-
- Posts: 1504
- Joined: October 1st, 2014, 3:25 pm
Re: This site not using HTTPS...Why?
This has come up before - http://forums.mozillazine.org/viewtopic ... &t=2950805
The upshot is this. The admin is quite short on time. And this board has several other, more important issues, like people getting locked out -
http://forums.mozillazine.org/viewtopic ... &t=3026494
http://forums.mozillazine.org/viewtopic ... &t=3027921
http://forums.mozillazine.org/viewtopic ... &t=2824277
As for feeling very insecure? Just know the risk and take some simple steps to protect yourself. All the usual advice applies. Plus,
- don't log in when you're connected to an untrusted network, such as any shared WiFi you don't control, or a network you don't know the admin.
- And make sure that your password is very different from those you use on HTTPS sites.
Do that and you can feel better, you'll be fine.
The upshot is this. The admin is quite short on time. And this board has several other, more important issues, like people getting locked out -
http://forums.mozillazine.org/viewtopic ... &t=3026494
http://forums.mozillazine.org/viewtopic ... &t=3027921
http://forums.mozillazine.org/viewtopic ... &t=2824277
As for feeling very insecure? Just know the risk and take some simple steps to protect yourself. All the usual advice applies. Plus,
- don't log in when you're connected to an untrusted network, such as any shared WiFi you don't control, or a network you don't know the admin.
- And make sure that your password is very different from those you use on HTTPS sites.
Do that and you can feel better, you'll be fine.
- BobbyPhoenix
- Posts: 280
- Joined: April 24th, 2014, 5:58 am
Re: This site not using HTTPS...Why?
Thanks for the explanation, and links.
Do, or do not. There is no try.
-
- Posts: 1504
- Joined: October 1st, 2014, 3:25 pm
Re: This site not using HTTPS...Why?
You're welcome.
- therube
- Posts: 21714
- Joined: March 10th, 2004, 9:59 pm
- Location: Maryland USA
Re: This site not using HTTPS...Why?
(FWIW. Another board that recently went to the dark side, Please add SSL to the forum.)
Fire 750, bring back 250.
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball CopyURL+ FetchTextURL FlashGot NoScript
- Mark12547
- Posts: 327
- Joined: May 13th, 2017, 11:36 am
- Location: Oregon, United States, Earth
Re: This site not using HTTPS...Why?
This board could also serve as a regression check to make sure that Firefox still notifies us that we are providing a password on an unsecured page.
The expected behavior now is that we are warned when supplying our password for this site, but not when we are supplying a password to our gateway device, which is usually a router.
The expected behavior now is that we are warned when supplying our password for this site, but not when we are supplying a password to our gateway device, which is usually a router.
-
- New Member
- Posts: 2
- Joined: November 18th, 2017, 3:13 am
Re: This site not using HTTPS...Why?
Yeah this is a strange situation ... when mozilla tries to make firefox more secure. A forum about firefox has no security at all ... Now i have to send my password unencrypted over the internet Randomly generated for just this website ... but still. Certificates are free these days, and installation shouldn't be too difficult ..
- Tony-E
- Posts: 8778
- Joined: November 5th, 2004, 11:28 am
Re: This site not using HTTPS...Why?
I use different passwords for every site, if this one get's compromised, not much will happen other than somebody could answer Firefox questions whilst pretending to be me.
Sites that store confidential info need the extra security, for a sites like this it is not essential.
Sites that store confidential info need the extra security, for a sites like this it is not essential.
- DanRaisch
- Moderator
- Posts: 127246
- Joined: September 23rd, 2004, 8:57 pm
- Location: Somewhere on the right coast
Re: This site not using HTTPS...Why?
Different passwords for each site (or type of site) is strongly recommended anyway. Sort of the opposite of using "password" as the password for every site.Randomly generated for just this website ... but still.