Unsecure Login

**Jadriancz** · #1 03-14-2017, 06:25 PM

Anyone else get the unsecure login message via the "http://" login as well as an "invalid security certificate" error when trying to use "https://".?

**Rubenandres77** · #2 03-14-2017, 06:44 PM

Me too.

It has started to appear in my Firefox browser since the last update (Firefox 52.0).

**rickstef** · #3 03-14-2017, 06:48 PM

I have tagged Jason, so he can look into this

there might be a certificate lapse

**Jason** · #4 03-14-2017, 08:59 PM

We are not an ecommerce site so we do not have an ssl certificate. Hence the issue when a member tries to use https. Which it seems the updated browser is trying to do. I will see what I can find out.

Here is a like to the issue. https://www.thesslstore.com/blog/fir...sword-warning/

Jason

**Jadriancz** · #5 03-14-2017, 10:39 PM

been seeing it on more and more sites lately. with all the identity and account thefts happening might be good to resolve it.

**imcold** · #6 03-14-2017, 11:54 PM

Maybe obtain a free certificate through Let's Encrypt? https://letsencrypt.org/

**CharlieC** · #7 03-15-2017, 12:53 AM

It's a policy change made in Firefox 52 - any website which can't be contacted with https gets flagged as a problem.

I think it's a bit silly since there are lots of websites that contain no information of any use to scammers, thieves or governments.

It seems to be Widows Firefox at the moment, doesn't seem to be in Mac Firefox 52.

Regards,

Charlie

**jimbean** · #8 03-15-2017, 12:13 PM

My experience is that only sites that require a login trigger the warning message.
Using letsencript sounds promising.
cheers Jim Bean

**Jadriancz** · #9 03-15-2017, 11:43 PM

Quote:

Originally Posted by Jason

We are not an ecommerce site so we do not have an ssl certificate. Hence the issue when a member tries to use https. Which it seems the updated browser is trying to do. I will see what I can find out.

Here is a like to the issue. https://www.thesslstore.com/blog/fir...sword-warning/

Jason

True this site may not be an eCommerce site, however, after being in IT for over 20 yrs I know there are those out there that use the same password for multiple sites (bad practice & lack of knowledge). Requiring a login should still provide the proper security protocols, certificates, etc., for those lacking experience.

**rockpaperscissor** · #10 03-16-2017, 06:05 AM

Yes, I get it - another Firefox user.