Change password

J

Jentek

Guest
When i logged in to change my password, 1password (or may have been iPadOS) warned me that the URL had switched from https to http, i.e. was not secure and someone could see the info flow.

why isnt it https - especially for a password change and especially on a tech related website?
 

chas_m

Well-Known Member
You don't say where you were logging into, but if you're referring to this site, send a note to Terry Findley about it.
 

tfindlay

Administrator
Staff member
The URL for the VMUG site is https://vmug.bc.ca
The URL for the forum is http://vmug.bc.ca/vmugforum/
Although the forum does not have the added security of the "s" designation you can enable two-factor verification in your forum preferences.
It is my understanding that the "s" designation is more of an issue for sites that involve financial transactions.
Screen Shot 2020-07-24 at 10.14.49 AM.png
 
J

Jentek

Guest
Financial trans certainly should use it but it is my understanding that the https designates that there is end to end encryption, so setting passwords via https ensures nobody else can see the clear password. Http is vulnerable to ‘man in the middle’ attacks.
 
Top