RFF login

O

Out to Lunch

Ventor
Local time
4:22 AM
Joined
Mar 28, 2009
Messages
11,705
Every time I log into RFF through Firefox I get this automated message that my login is not secure. How do I resolve this? Many thanks for your feedback. Cheers, Peter
 
Probably because they are not using a secure protocol (https) to serve the page. The site owner should set it up with a secure certificate. Google allegedly gives a boost to HTTPS pages in their search results, so there is an incentive there for the site owner.

Passwords being sent unencrypted can be easily intercepted, so don't use it for any other site!
 
unless you store personal data in your private messages here, there isn't much a hacker could get. just don't use the same password here as you do on other sites that *do* have sensitive info.
 
FujiLove said:
Probably because they are not using a secure protocol (https) to serve the page. The site owner should set it up with a secure certificate.
Click to expand...

The site is also served via https - perhaps the site admin should set up a redirect...

FujiLove said:
Passwords being sent unencrypted can be easily intercepted, so don't use it for any other site!
Click to expand...

Passwords haven't been sent unencrypted for something like 22 years. Safe authentication methods have already been in http before https was invented - the latter adds safe CONTENT.
 
I right clicked on the URL in my Bookmarks list, selected Properties, added the s, and saved. Works just fine without having to go hunting for it at the bottom of the bookmark listing.

PF
 
Should have the web person change the rewrite rules and have all traffic routed to https. Just a note.

Im also getting a Not secure from Chrome, which is odd cause i checked the certification on the site and all comes back ok...
 
Hi,

I look at the address before doing anything and - often - just type in the https:// the old fashioned one finger way.

It makes me laugh being warned that anyone could read what I've typed on a forum if I use an insecure link. Until now that has been my aim...

And I hope I don't have to explain why.

The other thing I'd liked sorted out is finding, at the end of a reply, that I am no longer logged in. And (EDIT) the double spacing.

Regards, David
 
sevo said:
The site is also served via https - perhaps the site admin should set up a redirect...



Passwords haven't been sent unencrypted for something like 22 years. Safe authentication methods have already been in http before https was invented - the latter adds safe CONTENT.
Click to expand...

This is incorrect. A HTTP data transfer is completely unencrypted, so the username and password are sent back to the server as plain text. A simple packet sniffer such as Wireshark can easily intercept the login data and expose the user credentials. It's one reason why you should always use an encrypted VPN when connected to public wifi networks.
 
You must log in or register to reply here.
Back
Top Bottom