# Insecure connection at log-in? **URL:** \ **Category:** About This Message Board\ **Created:** [October 6, 2017, 8:00pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134 "2017-10-06T20:00:49Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Esox\_Lucius](https://avatars.discourse-cdn.com/v4/letter/e/848f3c/32.png) [@Esox\_Lucius](https://boards.straightdope.com/u/Esox_Lucius)\ **Post date:** [October 6, 2017, 8:00pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/1 "2017-10-06T20:00:49Z")
I just tried to log in to the SDMB for the first time in a long while, and got a warning from Firefox that the connection is not secure. Clicking the “Learn more” link took me to [this Firefox page](https://support.mozilla.org/en-US/kb/insecure-password-warning-firefox?as=u&utm_source=inproduct) with this explanation: > [@](#): > > **Insecure password warning in Firefox** > > Firefox will display a lock icon with red strike-through in the address bar when a login page you’re viewing does not have a secure connection. This is to inform you that if you enter your password it could be stolen by eavesdroppers and attackers. Is it just me, or this something to be concerned about? ---
**Author:** ![Alley\_Dweller](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/alley_dweller/32/430_2.png) [@Alley\_Dweller](https://boards.straightdope.com/u/Alley_Dweller)\ **Post date:** [October 6, 2017, 8:11pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/2 "2017-10-06T20:11:07Z")
Just don’t use the same password at the SMDB that you use for your online banking, email, or other important places and everything will be fine. If someone steals your password here, the worst that will happen is that they will post some spam or some messages disparaging Cecil. Undesirable, yes, but it will not cause you eternal devastation. ---
**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\ **Post date:** [October 6, 2017, 8:12pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/3 "2017-10-06T20:12:23Z")
Remove the “s” from “https” and you’ll be fine. > [@Why does Firefos think the SDMB are not secure?](https://boards.straightdope.com/t/why-does-firefos-think-the-sdmb-are-not-secure/791187/6): > > Newer versions of Firefox and Chrome bitch because we have a login box on the page and we don’t use https. In the nearly two decades that the SDMB has been around it’s never been a problem, but newer browsers are pushing for better security. > > It’s not that big of a deal. > > On Firefox, you can disable it by going into about:config (you’ll have to google the exact setting, I don’t remember it off the top of my head), but that enables or disables it everywhere. I don’t think it is possible to enable/disable it on a site by site basis in Firefox. ---
**Author:** ![Esox\_Lucius](https://avatars.discourse-cdn.com/v4/letter/e/848f3c/32.png) [@Esox\_Lucius](https://boards.straightdope.com/u/Esox_Lucius)\ **Post date:** [October 6, 2017, 10:58pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/4 "2017-10-06T22:58:15Z")
Thanks. I can’t be the only Firefox user here so I didn’t think it was a problem, but I wanted to be sure. First time I’ve had that warning, anywhere. > [@Alley\_Dweller](#): > > Just don’t use the same password at the SMDB that you use for your online banking, email, or other important places and everything will be fine. I took care of that when there was some sort of security breach here a few years ago. Now I feel safe going to all the dodgy sites I want. That’s all it takes, right?🙂 ---
**Author:** ![Johnny\_L.A](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/johnny_l.a/32/1084_2.png) [@Johnny\_L.A](https://boards.straightdope.com/u/Johnny_L.A)\ **Post date:** [October 6, 2017, 11:27pm UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/5 "2017-10-06T23:27:20Z")
[The same thing happened to me](http://boards.straightdope.com/sdmb/showthread.php?t=837791). ---
**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\ **Post date:** [October 7, 2017, 12:14am UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/6 "2017-10-07T00:14:25Z")
> [@Skywatcher](#): > > Remove the “s” from “https” and you’ll be fine. Actually that’s exactly backwards. The OP’s issue as explained by e\_c\_g is that Firefox detects that you’re on http (\*not \*https) and that the page has a login dialog. That’s what triggers the warning. Adding the “s” for https would satisfy Firefox. Except for the other small detail that SDMB has a messed up SSL certificate so using https triggers a \*different \*scary message. Folks with the latest Chrome or FF can’t win except by configuring their browser to not be so picky about logins over http. ---
**Author:** ![kayT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kayt/32/3633_2.png) [@kayT](https://boards.straightdope.com/u/kayT)\ **Post date:** [October 7, 2017, 12:15am UTC](https://boards.straightdope.com/t/insecure-connection-at-log-in/798134/7 "2017-10-07T00:15:58Z")
Firefox gives me that warning in several places, all of which are places I visit often and do not consider dangerous. I think FF is a little overly cautious lately.