Forum log in is not secure message

[Ken Veal]

I have recently started to get a message from my Browser (Firefox) when I visit the forum . ”This connection is not secure, log ins entered here could be compromised”
I have then to enter my details to log in
Below is the advice the latest version of Firefox gives
What can I do if a login page is insecure?
If a login page for your favorite site is insecure, you can try and see if a secure version of the page exists by typing https:// before the URL in the address bar. You can also try to contact the web administrator for the site and ask them to secure their connection.

[Ken Berry]

Well Ken, you are -- as far as my memory goes -- the only person ever to report this, though I am sure a lot of other users also use Firefox. I have done an advanced search, but got no results relating to browser messages like this. There have been a handful of people reporting virus warnings over the years, though these related to files on program installation discs or downloads. They also turned out to be false positives attributable to specific anti-virus programs.

Personally I would be inclined to treat this too as a false positive, unless other users start reporting the same thing, whether from Firefox or other browsers.

[Ken Veal]

Does it really matter on accessing a forum such as this that https:// is not before the URL anyway, after all we are not entering our credit card details to make a big purchase

[tletter]

What can I do if a login page is insecure?

Nothing as the forum does not support at secure connection, i.e. the URL is "http://forum.corel.com/EN/" and not "https://forum.corel.com/EN/".

Chrome reports the following when trying to access "https://forum.corel.com/EN/":

Microsoft Edge reports the following when trying to access "https://forum.corel.com/EN/":

I would be inclined to treat this too as a false positive

It's not a false positive. The Forum provider knows that w/o using a secure connection, a user's credentials are being passed in the clear. If we were conducting financial transactions then it would be a show-stopper but here the damage from compromise is low unless users are using the same password for important business such as online banking.

[BrianCee]

Definitely not false Ken - it is there before you log in - see attachment -- I guess you usually remained logged in and so will not see it

it also depends on what browser you use and what software you are using in terms of web browsing protection as to whether you actually see a warning

it has been reported and discussed - by DavidK - here http://forum.corel.com/EN/viewtopic.php ... 9&p=341215&

it means that Corel have not / will not invest a little extra money on their servers to get the extra security certificates required - any site which only shows http is not secure -- needs to show https

[lata]

Hi
I have used various browsers, Firefox, edge, IE, Chrome and never seen that message when accessing the forum.

I would think there would be a setting within the browser to mark the site as safe?
Not that I have had to do that?

Has this message always showed or just recently?

[BrianCee]

Has this message always showed or just recently?

well David reported it back in March so it's been about that long

YES - it is a setting in your browser or software on your computer - you should not turn it off - the whole object of it is to warn you about sites which are a bit careless with security - it is for your safety online

it only shows on the forum BEFORE you log in - so if you arrive on the forum already logged in you will not see it

have you not activated your free McAfee Web Protection option to warn you of potentially dangerous (to your personal info) websites Trevor

[tletter]

I would think there would be a setting within the browser to mark the site as safe?

The site isn't safe in terms of protecting the confidentiality your login credentials. Users should at least understand this.

[Ken Veal]

I think the message I see coincides with the latest version of Firefox being installed

[lata]

Hi
I understand the site is not secure, I was asking Ken if the problem has just started for him, not whether David has the same issue.
Surly if there is an annoying popup we should be able to mark that particular site as friendly and stop the popup.
I was not intending to tell Ken to disable his browser security.

I do not see this popup so why should Ken be pestered.

Do you guys see this popup reporting Corel as unsafe.