Unsecure login

#1 Rule - Play Nice PLEASE!!
#2 Rule - This is not a forum for sales or wanted....please keep it to just general doll discussion.
Post Reply
MikeTheEngineer
Feedback: 0|0|0

Unsecure login

Post by MikeTheEngineer »

I've noticed recently that clicking "login" takes me to an unsecure "HTTP" login screen. This sends usernames and password over the internet in clear text.

If you're using Firefox, and see a "broken lock" next to the WWW, that means it's unsecure. To fix this, type HTTPS:// In front of the WWW, and press enter.

It appears that recently, the login button itself has changed from an HTTPS link to an HTTP link. Any admin that has edit permissions to the website should look into this.

Thanks. Your Friendly local engineer. ^_^
User avatar
erin1958
Posts: 20495
Joined: Wed Oct 17, 2007 10:51 pm
Location: S.E., Kansas USA
Feedback: 274|0|0

Re: Unsecure login

Post by erin1958 »

Let Steve know Mike. It's his forum. He'll fix it. He is the first name listed if you click on MEMBERS and you can PM him from there. Good catch. Thanks.
HAVE A WONDERFUL DAY!!
Cheers, Erin
User avatar
Suzanne
Posts: 20253
Joined: Sat Dec 20, 2008 6:32 pm
Feedback: 332|0|0

Re: Unsecure login

Post by Suzanne »

I am always using my iphone anyway......
alienor
Feedback: 0|0|0

Re: Unsecure login

Post by alienor »

thanks for the info, Mike, I use now https :D
MikeTheEngineer
Feedback: 0|0|0

Re: Unsecure login

Post by MikeTheEngineer »

Suzanne wrote:I am always using my iphone anyway......
Irrelevant.

Https: creates an encrypted "tunnel" between your device and the end destination.
http: blasts your username and password in clear text all over the internet, regardless of how you access it.

I'm unaware how secure Iphones are, but I do know, that once it leaves the cellular network, HTTP will be complete unsecure.
And HTTPS is 100% secure, even on public wifi at McDonalds at a hacker convention. (though, the rest of your device would probably be hacked before you even logged into your laptop or other device)

And Pro Tip: *ALWAYS* make sure your browser is HTTPS when logging into any Bank account or other financial service!!
User avatar
Mikki
Posts: 3371
Joined: Tue Aug 27, 2002 8:01 am
Location: Rochester NY
Feedback: 13|0|1

Re: Unsecure login

Post by Mikki »

Thankyou
Realborn Jaxon

Image

Mikki W
User avatar
Suzanne
Posts: 20253
Joined: Sat Dec 20, 2008 6:32 pm
Feedback: 332|0|0

Re: Unsecure login

Post by Suzanne »

MikeTheEngineer wrote:
Suzanne wrote:I am always using my iphone anyway......
Irrelevant.

Https: creates an encrypted "tunnel" between your device and the end destination.
http: blasts your username and password in clear text all over the internet, regardless of how you access it.

I'm unaware how secure Iphones are, but I do know, that once it leaves the cellular network, HTTP will be complete unsecure.
And HTTPS is 100% secure, even on public wifi at McDonalds at a hacker convention. (though, the rest of your device would probably be hacked before you even logged into your laptop or other device)

And Pro Tip: *ALWAYS* make sure your browser is HTTPS when logging into any Bank account or other financial service!!
I am very familiar with the S on the end of the H TTP as I work for a bank
MikeTheEngineer
Feedback: 0|0|0

Re: Unsecure login

Post by MikeTheEngineer »

Suzanne wrote:
MikeTheEngineer wrote:
Suzanne wrote:I am always using my iphone anyway......
Irrelevant.

Https: creates an encrypted "tunnel" between your device and the end destination.
http: blasts your username and password in clear text all over the internet, regardless of how you access it.

I'm unaware how secure Iphones are, but I do know, that once it leaves the cellular network, HTTP will be complete unsecure.
And HTTPS is 100% secure, even on public wifi at McDonalds at a hacker convention. (though, the rest of your device would probably be hacked before you even logged into your laptop or other device)

And Pro Tip: *ALWAYS* make sure your browser is HTTPS when logging into any Bank account or other financial service!!
I am very familiar with the S on the end of the H TTP as I work for a bank
My apologies, I didn't quite get the relevance of your comment vs my original post. My reply wasn't meant to imply anything negative. And the tip was for everyone, not directed just at you. ^_^

Anyway, it appears to have been fixed. :headspin:
Post Reply