Insecure connection at log-in?

[Esox_Lucius]

I just tried to log in to the SDMB for the first time in a long while, and got a warning from Firefox that the connection is not secure. Clicking the “Learn more” link took me to this Firefox page with this explanation:

Insecure password warning in Firefox

Firefox will display a lock icon with red strike-through in the address bar when a login page you’re viewing does not have a secure connection. This is to inform you that if you enter your password it could be stolen by eavesdroppers and attackers.

Is it just me, or this something to be concerned about?

[Alley_Dweller]

Just don’t use the same password at the SMDB that you use for your online banking, email, or other important places and everything will be fine.

If someone steals your password here, the worst that will happen is that they will post some spam or some messages disparaging Cecil. Undesirable, yes, but it will not cause you eternal devastation.

[Skywatcher]

Remove the “s” from “https” and you’ll be fine.

@engineer_comp_geek

Newer versions of Firefox and Chrome bitch because we have a login box on the page and we don’t use https. In the nearly two decades that the SDMB has been around it’s never been a problem, but newer browsers are pushing for better security.

It’s not that big of a deal.

On Firefox, you can disable it by going into about:config (you’ll have to google the exact setting, I don’t remember it off the top of my head), but that enables or disables it everywhere. I don’t think it is possible to enable/disable it on a site by site basis in Firefox.

[Esox_Lucius]

Thanks. I can’t be the only Firefox user here so I didn’t think it was a problem, but I wanted to be sure. First time I’ve had that warning, anywhere.

@Alley_Dweller

Just don’t use the same password at the SMDB that you use for your online banking, email, or other important places and everything will be fine.

I took care of that when there was some sort of security breach here a few years ago. Now I feel safe going to all the dodgy sites I want. That’s all it takes, right?

[Johnny_L.A]

The same thing happened to me.

[LSLGuy]

@Skywatcher

Remove the “s” from “https” and you’ll be fine.

Actually that’s exactly backwards.

The OP’s issue as explained by e_c_g is that Firefox detects that you’re on http (*not *https) and that the page has a login dialog. That’s what triggers the warning. Adding the “s” for https would satisfy Firefox.

Except for the other small detail that SDMB has a messed up SSL certificate so using https triggers a *different *scary message.

Folks with the latest Chrome or FF can’t win except by configuring their browser to not be so picky about logins over http.

[kayT]

Firefox gives me that warning in several places, all of which are places I visit often and do not consider dangerous. I think FF is a little overly cautious lately.