# Firefox gives warning about insecure password when I login **URL:** \ **Category:** About This Message Board\ **Created:** [March 18, 2017, 6:42pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499 "2017-03-18T18:42:41Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![DrumBum](https://avatars.discourse-cdn.com/v4/letter/d/e79b87/32.png) [@DrumBum](https://boards.straightdope.com/u/DrumBum)\ **Post date:** [March 18, 2017, 6:42pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499/1 "2017-03-18T18:42:41Z")
After updating to the latest version of Firefox ( Version 52 ) I am getting a mildly annoying message box warning me that my login page - the SDMB - is not a secure connection. It lets me continue with a mild rebuke and a suggestion that I contact the web administrator to fix this. It is only a mild annoyance that does not impend my foray into the SDMB but I was wondering if there a remediation step I can try. [Mozilla web link](https://support.mozilla.org/t5/Protect-your-privacy/Insecure-password-warning-in-Firefox/ta-p/27861) ---
**Author:** ![scabpicker](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/scabpicker/32/8268_2.png) [@scabpicker](https://boards.straightdope.com/u/scabpicker)\ **Post date:** [March 18, 2017, 7:04pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499/2 "2017-03-18T19:04:20Z")
No, not really. It’s complaining about the connection because it’s not encrypted. The SDMB doesn’t have a valid certificate (you get a cloudfront cert when you visit the HTTPS site), and then it redirects you to the non-encrypted site anyway. So, its out of your hands. ---
**Author:** ![Richard\_Parker](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@Richard\_Parker](https://boards.straightdope.com/u/Richard_Parker)\ **Post date:** [March 18, 2017, 7:36pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499/3 "2017-03-18T19:36:49Z")
SDMB should fix this. It costs nothing to become https these days, and is a totally sensible measure on a forum like this. ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [March 18, 2017, 10:58pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499/4 "2017-03-18T22:58:25Z")
> [@Richard\_Parker](#): > > SDMB should fix this. It costs nothing to become https these days, and is a totally sensible measure on a forum like this. [The certificate is free, yes.](https://letsencrypt.org/) But they use Amazon Cloudfront, and are charged for HTTPS traffic. I don’t know if it’s the same price as HTTP traffic or not. I do know that the $600 upcharge is only for a dedicated IP, which is only needed so you can support Internet Explorer 6. So this should not be an issue. ---
**Author:** ![BigT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/bigt/32/12044_2.png) [@BigT](https://boards.straightdope.com/u/BigT)\ **Post date:** [March 18, 2017, 11:04pm UTC](https://boards.straightdope.com/t/firefox-gives-warning-about-insecure-password-when-i-login/782499/5 "2017-03-18T23:04:14Z")
It’s a feature added in Firefox 52. The passwords are just as (in)secure as they’ve always been. But Firefox is really on the HTTPS everywhere bandwagon. I don’t think you should have to rebuke anything, though. Your username should still be there, just below the notice. Though it can be a easy to miss, as the notice is a bit large because it’s trying to fit the whole message in the size of the login box. Now whether Firefox will make it harder in the future is unknown.