It is currently 03/28/24 2:57 pm

All times are UTC - 6 hours




  Page 1 of 1   [ 17 posts ]
Author Message
 Offline
PostPosted: 12/07/17 7:56 am • # 1 
User avatar
Editorialist

Joined: 05/05/10
Posts: 14091
When I tried to login here on Firefox, I got directed to this page of info. Anyone else?:


Insecure password warning in Firefox

Firefox will display a lock icon with red strike-through red strikethrough icon in the address bar when a login page you’re viewing does not have a secure connection. This is to inform you that if you enter your password, it could be stolen by eavesdroppers and attackers.

Starting in Firefox version 52, you will also see a warning message when you click inside the login box to enter a username or password.

What can I do if a login page is insecure?

If a login page for your favorite site is insecure, you can try and see if a secure version of the page exists by typing https:// before the URL in the address bar. You can also try to contact the web administrator for the site and ask them to secure their connection.
Not recommended: You can also continue to log in to the website even if the connection is insecure, but do so at your own risk. If you do go this route, try to use a unique password or a password that you don’t also use for other important sites.

....etc. etc. (a lot of blah, blah I don't really understand)

https://support.mozilla.org/en-US/kb/in ... =inproduct


Top
  
 Offline
PostPosted: 12/07/17 8:37 am • # 2 
User avatar
Administrator

Joined: 11/07/08
Posts: 42112
I'll let Jabra tackle the technical issues ~ but I just logged out and back in ... and I don't get the same warning ~ I do however get the warning when I log into the admin area of VoC ~ I ignore the warning and log in ~ I'm 99% sure VoC is safe ~

Have you updated to the "new Firefox", roseanne?

Sooz


Top
  
 Offline
PostPosted: 12/07/17 9:56 am • # 3 
User avatar
Editorialist

Joined: 05/05/10
Posts: 14091
sooz06 wrote:
I'll let Jabra tackle the technical issues ~ but I just logged out and back in ... and I don't get the same warning ~ I do however get the warning when I log into the admin area of VoC ~ I ignore the warning and log in ~ I'm 99% sure VoC is safe ~

Have you updated to the "new Firefox", roseanne?

Sooz


I think so sooz. I usually get it automatically and d/l it when prompted. I'll have to check later after work.......or in the morning, whenever I'm coherent enough, lol.


Top
  
 Offline
PostPosted: 12/07/17 9:39 pm • # 4 
User avatar
Editorialist

Joined: 05/05/10
Posts: 14091
I've just updated to 57.0.2, which is stated as being up-to-date. Still getting the "warning". lol


Top
  
 Offline
PostPosted: 12/08/17 9:17 am • # 5 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
it is not only Firefox pointing out that passwords entered on an HTTP page instead of an HTTPS page are insecure. Chrome does it too.
If VoC would be your personal banking portal I would worry about.
Otherwise, no, I don't worry that someone goes through the trouble to hack into VoC to steal my "unsecured" password to make a post under my credentials.
But, browsers are all going to mark simple HTTP pages as unsecured in future.

I'll look into our host's SSL offers. There should be a FREE 'Let's Encrypt' certificate available to us and I believe I would have to change one file to redirect our http requests to https.


Top
  
 Offline
PostPosted: 12/08/17 9:39 am • # 6 
User avatar
Administrator

Joined: 11/07/08
Posts: 42112
jabra2 wrote:
it is not only Firefox pointing out that passwords entered on an HTTP page instead of an HTTPS page are insecure. Chrome does it too.
If VoC would be your personal banking portal I would worry about.
Otherwise, no, I don't worry that someone goes through the trouble to hack into VoC to steal my "unsecured" password to make a post under my credentials.
But, browsers are all going to mark simple HTTP pages as unsecured in future.

I'll look into our host's SSL offers. There should be a FREE 'Let's Encrypt' certificate available to us and I believe I would have to change one file to redirect our http requests to https.

This is why we LOVE jabra! ~ :hrt

FTR, if there is no "FREE 'Let's Encrypt' certificate available to us", please check out the cost ~ it might be reasonable enough to do just to put minds at ease ~

Sooz


Top
  
 Offline
PostPosted: 12/08/17 9:42 am • # 7 
User avatar
Editorialist

Joined: 05/05/10
Posts: 14091
Thanks jab. I won't worry then.


Top
  
 Offline
PostPosted: 12/08/17 9:47 am • # 8 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
Looking already.... :D
Dreamhost has the FREE one. I'm on our cPanel right now but I think I'll switch over later at night. Just in case.
I'll have to change our cookie settings to "secure" and not sure about a "re-direct" addon to our htaccess file


Top
  
 Offline
PostPosted: 12/08/17 10:07 am • # 9 
User avatar
Administrator

Joined: 11/07/08
Posts: 42112
Whenever you can get it done will be FANTASTIC, jab!

I confess I took a look at the DreamHost Panel too ~ I'm surprised the paid versions are so inexpensive [$15/year] ~ when you have time, could you please check to see if the paid version offers additional safety features ~ it might well be worth it ~

Sooz


Top
  
 Offline
PostPosted: 12/08/17 7:30 pm • # 10 
User avatar
Administrator

Joined: 11/07/08
Posts: 42112
jab, I just received an email from DH that they are installing our certificate, including a copy of the certificate and other info that you might need ~ I forwarded a copy of the email to your email ~

Sooz


Top
  
 Offline
PostPosted: 12/08/17 7:33 pm • # 11 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
looks like I got it.
when you type in at IE voicesorchoices.com it redirects to https://voicesorchoices.com
with Opera it still says "unsecured"
Chrome redirects

After checking a bit further it is only the images which are "unsecured" and that's why there are still "unsecure" comments with some browsers.

I'll check that out in a while.
Anyway, we now have a https://voicesorchoices.com address and http://voices... gets redirected automatically to https://


Top
  
 Offline
PostPosted: 12/08/17 7:53 pm • # 12 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
Found most likely the culprit why it is still somewhat unsecure..

Mixed Content - Errors
Soft Failure

A file with an insecure url of "http://s03.flagcounter.com/count/Xu3a/bg=6992A9/txt=000000/border=89ABBF/columns=3/maxflags=12/viewers=0/labels=1/pageviews=1/" was loaded on line: 613 of https://voicesorchoices.com/.
This URL will need to be updated to use a secure URL for your padlock to return.

Soft Failure

An image with an insecure url of "http://www.speedtest.net/images/link80x15_2.gif" was loaded on line: 615 of https://voicesorchoices.com/.
This URL will need to be updated to use a secure URL for your padlock to return.


Top
  
 Offline
PostPosted: 12/08/17 8:00 pm • # 13 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
....aaaaaannnnd FIXED!

Got the little lock next to the address bar on all browsers. We are secure.


Top
  
 Offline
PostPosted: 12/08/17 8:12 pm • # 14 
User avatar
Administrator

Joined: 11/07/08
Posts: 42112
I've got the green lock now too ... even when I log into the admin forum ~

jab, THANK YOU! ~ :hrt

Sooz


Top
  
 Offline
PostPosted: 12/09/17 9:32 am • # 15 
User avatar
Editorialist

Joined: 05/05/10
Posts: 14091
Virtual hugs, jab. Thanks. You are a techno-genius....although that "soft failure" might be more of a personal problem. ;) :run

j/k Again, thanks. :k


Top
  
 Offline
PostPosted: 12/09/17 10:04 am • # 16 
User avatar
Administrator

Joined: 04/05/09
Posts: 8047
Location: Tampa, Florida
roseanne wrote:
Virtual hugs, jab. Thanks. You are a techno-genius....although that "soft failure" might be more of a personal problem. ;) :run

j/k Again, thanks. :k


Hey, I didn't come up with that word. :D It's what the program I used called it.


Top
  
 Offline
PostPosted: 01/01/18 7:30 pm • # 17 
Administrator

Joined: 01/16/16
Posts: 30003
Soft failure?
Does Viagra fix it?


Top
  
Display posts from previous:  Sort by  

  Page 1 of 1   [ 17 posts ] New Topic Add Reply

All times are UTC - 6 hours



Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
© Voices or Choices.
All rights reserved.