You are not logged in.

#1 2017-06-03 22:05

ghostdawg
Member
From: USA
Registered: 2016-09-19
Posts: 69

Insecure Login

Today I went to sign into the forums and at the login screen, I seen a message saying this is an "insecure login" at the username & password boxes. Any idea what this is about?

I'm running Firefox 52.1.2 64bit version.


Dell Optiplex 760 - Quad Core | 4gb | 250gb | Mageia 5, Salix 14.2, Q4OS
Lenovo Thinkpad T420 | 4gb | 120gb | Mageia 5, Debian Testing

Offline

#2 2017-06-03 23:26

crosscourt
Member
Registered: 2017-05-07
Posts: 1,805
Website

Re: Insecure Login

Firefox 52 has a new feature that warns you if youre login is insecure and it will happen a lot if you go to many http sites.

You can disable it if you like.

More here, https://support.mozilla.org/en-US/kb/in … ng-firefox

Last edited by crosscourt (2017-06-03 23:30)


Q4OS Aquarius 5.1 KDE   Lenovo Thinkcentre M900 Tiny i5-6500T, 16gb ddr4 ram, 512gb m.2 ssd

Offline

#3 2017-06-03 23:27

Dai_trying
Member
From: UK
Registered: 2015-12-14
Posts: 2,989

Re: Insecure Login

It's what is used when the site is not https, it's not that it is insecure, just that it doesn't use the "security" web policy. It's all about certificates I believe, but I'm no expert on the subject...

I get the same warnings when I log in to other forums too, so long as you "trust" the site you are logging in to then you should be ok. Although having said that I wouldn't do anything involving a financial transaction if it were not https, but that is a different concept to using forums and such like (IMO).

Offline

#4 2017-06-03 23:33

crosscourt
Member
Registered: 2017-05-07
Posts: 1,805
Website

Re: Insecure Login

Totally agree, if its a trusted site but honestly even trusted sites can have login issues. If its something personal or financial its got to be https.


Q4OS Aquarius 5.1 KDE   Lenovo Thinkcentre M900 Tiny i5-6500T, 16gb ddr4 ram, 512gb m.2 ssd

Offline

#5 2017-06-04 18:38

ghostdawg
Member
From: USA
Registered: 2016-09-19
Posts: 69

Re: Insecure Login

Thanks guys. I thought Q4OS would have the secure certificate or whatever it takes to stop the message from appearing.


Dell Optiplex 760 - Quad Core | 4gb | 250gb | Mageia 5, Salix 14.2, Q4OS
Lenovo Thinkpad T420 | 4gb | 120gb | Mageia 5, Debian Testing

Offline

#6 2017-06-04 18:44

q4osteam
Q4OS Team
Registered: 2015-12-06
Posts: 4,223
Website

Re: Insecure Login

@ghostdawg
Do you use 'https', when you login to forum ? If not, please just enter https://www.q4os.org/forum/ into your browser.

Offline

#7 2017-06-04 18:54

crosscourt
Member
Registered: 2017-05-07
Posts: 1,805
Website

Re: Insecure Login

Firefox 52 and later defaults to https so you wont get a choice and Chrome can be set to default to https if you prefer.


Q4OS Aquarius 5.1 KDE   Lenovo Thinkcentre M900 Tiny i5-6500T, 16gb ddr4 ram, 512gb m.2 ssd

Offline

#8 2017-06-04 18:57

Dai_trying
Member
From: UK
Registered: 2015-12-14
Posts: 2,989

Re: Insecure Login

I guess I should change my bookmarks then smile

Offline

#9 2017-06-04 19:01

crosscourt
Member
Registered: 2017-05-07
Posts: 1,805
Website

Re: Insecure Login

Yes, be aware of all bookmarks and whether they are https. Better yet use private browsing mode in Firefox.

I believe there is an extension called HTTPS Everywhere that can be used with major browsers.

Last edited by crosscourt (2017-06-04 19:06)


Q4OS Aquarius 5.1 KDE   Lenovo Thinkcentre M900 Tiny i5-6500T, 16gb ddr4 ram, 512gb m.2 ssd

Offline

#10 2017-06-05 04:15

ghostdawg
Member
From: USA
Registered: 2016-09-19
Posts: 69

Re: Insecure Login

q4osteam wrote:

@ghostdawg
Do you use 'https', when you login to forum ? If not, please just enter https://www.q4os.org/forum/ into your browser.

I'm not sure how it works but it seems when I type in the address, it automatically turn into https AFAIK. This forum is the first one I've noticed showing a warning message about it not being secure. I probably just didn't pay attention. I've had 5 friends & family members past since December.


Dell Optiplex 760 - Quad Core | 4gb | 250gb | Mageia 5, Salix 14.2, Q4OS
Lenovo Thinkpad T420 | 4gb | 120gb | Mageia 5, Debian Testing

Offline

#11 2017-06-05 15:27

crosscourt
Member
Registered: 2017-05-07
Posts: 1,805
Website

Re: Insecure Login

Yes Firefox automatically defaults to https when you type in an address.


Q4OS Aquarius 5.1 KDE   Lenovo Thinkcentre M900 Tiny i5-6500T, 16gb ddr4 ram, 512gb m.2 ssd

Offline

Board footer

Powered by FluxBB