Jump to content

The nexus site isn't a safe place.


bOMKHA

Recommended Posts

Chrome is also issuing the same warnings and Google has said they'll start marking HTTP only sites as insecure later this year. Firefox will be doing the same. Makes me wonder why Nexus turned off their HTTPS support on the main site but left the forum enabled for it.

 

That said, it's hugely paranoid for the browser people to be doing this at all since a lot of sites don't have any reason to need to be secured.

Link to comment
Share on other sites

Mostly revolved around two issues:

  1. A lot of advertisers still aren't SSL enabled, which means we can't use them, which means turning on SSL would give around a 25% hit to ad revenue at the moment (according to our broker, who have it enabled on a few of their sites)
  2. We had a few issues with our CDN and the serving of static content

Now we're in the final stages of the redesign we just don't want to tackle it until we're through the gate.

Link to comment
Share on other sites

From what I have noticed, it is probably related to the new features the Firefox people have added in an effort to protect users and/or raise awareness. It seems to be detailed here: https://developer.mozilla.org/en-US/docs/Web/Security/Insecure_passwords

 

At the bottom of the page there is a link to this FAQ post of sorts: https://blog.mozilla.org/tanvi/2016/01/28/no-more-passwords-over-http-please/

 

The main Nexus site does not seem to use HTTPS, so Firefox will report it as a potential risk. Handy, I would say, and definitely welcome. :smile: As for the login, you could try bookmarking the forums section and logging in from here instead. Hopefully that helps a bit.

 

Edit: Maybe it could also be something else, but that was the first most obvious thing that came in mind. I use the latest Firefox myself, too, and have not noticed anything odd. But I also use the forums section to login to the site.

 

Thanks for the link, that clarifies what I suspected (main Nexus site not using HTTPS, which is why Firefox is reacting that way) I'd say it's too much of a coincidence that this starts happening at the same time Firefox comes with an update that has this feature built-in. I'm using the forum section to log-in now anyway. :)

So the OP should do the same.

Link to comment
Share on other sites

  • 1 month later...

I hope you this is "tackled" soon. It does not give me the warm and fuzzies that https/ssl is not being to transfer account info. I won't be using nmm until I see a happy green lock on the main page. Kind of amazed that having user creds flying around isn't much of a concern. o.0

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...