New Issue With Login Pane?

[Palanan]

When I logged in just now, I had a popup warning that the login interface was not secure and could be vulnerable, etc. etc. I've never seen that before, not sure if anyone else has had that appear.

I'm using Firefox on a Mac, and just this morning NoScript auto-updated to v.5.0.1. That might be why I'm suddenly getting this warning. Not sure if it's something to be concerned about, or just some little quirk the latest version of NoScript has with the login interface.

[Rawhide]

This is simply Firefox warning you that the page is being delivered over http not https. This is a new addition in the latest version of Firefox. See here (https://support.mozilla.org/t5/Protect-your-privacy/Insecure-password-warning-in-Firefox/ta-p/27861) for details.

vBulletin uses its own system to protect your login credentials, so your credentials should be safe regardless. That being said, we always recommend that you use different passwords on each site.

[Nerd-o-rama]

Thanks for the explanation, I was about to come in here and start expressing concerns about your security certificate. As long as Firefox is the only thing that's changed.

[Gelcur]

I was going to create a new thread but then I saw this one. And I think the two things are related, when trying to use https for www.giantitp.com it serves up an error code:


www.giantitp.com uses an invalid security certificate.
The certificate is not trusted because it is self-signed.
The certificate is not valid for the name www.giantitp.com.
The certificate expired on 04/26/2014 XX:XX XM. The current time is 04/22/2017 XX:XX XM.
Error code: SEC_ERROR_UNKNOWN_ISSUER

I know vBulletin does its own password security but more and more of the net is moving to https, https://letsencrypt.org/ has been offering free https certs for a while now. Would be great for those security paranoid among us.

Just figured I'd let you guys know. Please keep up the good work.

[Rawhide]

I was going to create a new thread but then I saw this one. And I think the two things are related, when trying to use https for www.giantitp.com it serves up an error code:

As noted above, the website does not currently use https. Thank you.