Taking Https denial to an absurd level

Minimalist · Nov 2, 2017

Sometimes fighting good security is harder than embracing it. That appears to be the case with at least one company that went to great lengths to avoid insecure HTTPS browser security warnings from appearing on the thousands of sites it managed.

The company in question is ShopCity.com, a community-based business that gives brick-and-mortar retailers and municipalities a place to hang their shingles online. Recently Troy Hunt, who runs the Have I Been Pwned service, was tipped off to a unique act of security defiance.

ShopCity.com was using “pseudo password fields” to avoid Google Chrome and the Firefox browser from showing “Not Secure” warnings in the URL bars of the sites it managed.
Click to expand...

https://threatpost.com/taking-https-denial-to-an-absurd-level

xxJackxx · Nov 3, 2017

It would be easy to do. I'm surprised it doesn't happen more.

Minimalist · Nov 3, 2017

xxJackxx said: ↑

It would be easy to do. I'm surprised it doesn't happen more.
Click to expand...

Yes for phishing sites and similar. Not logical for legit sites IMO.

Log in or Sign up

Taking Https denial to an absurd level

Minimalist Registered Member

xxJackxx Registered Member

Minimalist Registered Member

Log in or Sign up

Taking Https denial to an absurd level

Minimalist Registered Member

xxJackxx Registered Member

Minimalist Registered Member

Useful Searches