4 ms·
It's 2016 and I still know no casual Internet user that looks for the green padlock before entering sensitive information. Heck, even many of my peers (develope
by art0rz 10y ago
It's 2016 and I still know no casual Internet user that looks for the green padlock before entering sensitive information. Heck, even many of my peers (developers, etc.) don't seem to either care or are ignorant to it. I don't think it's their fault, I believe it's more of an educational issue. Perhaps browsers should display a confirmation dialog when the user is trying to send some sensitive information over HTTP.
- Ajedi32 10y agoChrome is going to start displaying an (admittedly easy-to-miss) warning in situations like that, starting in January: https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html https://security.googleblog.com/2016/09/moving-towards-more-...
- jlgaddis 10y agoFirefox used to have a preference you could set: security.warn_submit_insecure When set to true, Firefox would warn the user that the data they were about to send was not encrypted and would be sent over plain-text HTTP. This setting was removed at some point (FF19, IIRC) and is currently (AFAICT) a NOP; cf. bug #799009, "Remove support for obsolete SSL-related warning prompts" [0] [0]: https://bugzilla.mozilla.org/show_bug.cgi?id=799009 https://bugzilla.mozilla.org/show_bug.cgi?id=799009