Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: A question re. http and https

05 Jan 2012   #1
FranzB

Windows 7 Home Premium 32bit, Linux Mint Julia, in dual boot mode
 
 
A question re. http and https

I have a long running feud with my internet provider. They have a site where i can log in to view my personal data (email, bills, etc.) and my user name and password has to be given. This is an http site! However, when you do log in on this http site you are transferred to an https site. ???????????
My point is that the transfer of my user name and password is not secure since it is done via an http connection. They deny and claim everything is secure.
The funny (but not haha) part of it is that they also have an https site where you can log in (found when googling but way down in the listings given by Google).

I am confused. Totally.
They even told me once i had a redirecting virus. Nonsense, of course, because google gives the https as well as the http site for logging in.
Any information to clear up my confusion? Am i nuts or are they?


My System SpecsSystem Spec
.
05 Jan 2012   #2
tom982

Microsoft Community Contributor Award Recipient

Windows 8.1 Pro x64
 
 

Hello FranzB

Don't worry, they are the incompetent ones. You're perfectly right about the dangers of using http over https. Have you seen this addon before? If forces https to be used wherever possible

https://www.eff.org/https-everywhere

Tom
My System SpecsSystem Spec
05 Jan 2012   #3
FranzB

Windows 7 Home Premium 32bit, Linux Mint Julia, in dual boot mode
 
 

Quote   Quote: Originally Posted by tom982 View Post
Hello FranzB

Don't worry, they are the incompetent ones. You're perfectly right about the dangers of using http over https. Have you seen this addon before? If forces https to be used wherever possible

https://www.eff.org/https-everywhere

Tom
Thanks, Tom, for the link.
What especially gets me is that you can login to your account on an http webpage but that the page you get then and where you can click on several options (e.g. the bills) is an https. It's simply weird. And then the help desk telling me that i have a redirect virus. It took me hours checking with all kinds of programs. And it's not just any provider (the old Postal Services). After three months and three emails they called me by phone today and asked whether the problem was solved. They don't even check themselves. Idiots.
My System SpecsSystem Spec
.

05 Jan 2012   #4
seavixen32

Windows 7 Ultimate SP1 64-Bit
 
 

Purely out of interest, which ISP do you use?

It might pay you to shop around and consider switching.

I did recently and got a better telephone,TV and broadband bundle AND a 20 ($35) a month saving.
My System SpecsSystem Spec
05 Jan 2012   #5
FranzB

Windows 7 Home Premium 32bit, Linux Mint Julia, in dual boot mode
 
 

@ seavixen32

Well, i don't know whether i should give the name here -- they might take legal action for "false accusations" should they see it. But it is not any GB or US provider. And i am on an old "grandfather" clause whereby they don't check my traffic (in MB). So no bundle to pay for and the speed is ok. They tried, however, to have me change my subscription which i declined, smiling.
My System SpecsSystem Spec
06 Jan 2012   #6
logicearth

Windows 10 Pro (x64)
 
 

Since I cannot see the page in question. Is the form where you are putting the details of your user account, does the URI in the "action" attribute use HTTPS or HTTP as the scheme. If the "action" attribute has an HTTPS scheme then the values of your username and password are sent over a secure line, even if the page is served as HTTP. As long as the form's "action" attribute is HTTPS.
My System SpecsSystem Spec
06 Jan 2012   #7
FranzB

Windows 7 Home Premium 32bit, Linux Mint Julia, in dual boot mode
 
 

Quote   Quote: Originally Posted by logicearth View Post
Since I cannot see the page in question. Is the form where you are putting the details of your user account, does the URI in the "action" attribute use HTTPS or HTTP as the scheme. If the "action" attribute has an HTTPS scheme then the values of your username and password are sent over a secure line, even if the page is served as HTTP. As long as the form's "action" attribute is HTTPS.
Hmmm......... how do i find out? The page on which i fill in my username and password is shown in the address bar as http or www. What happens when i ckick on the "login" button i don't know. How do you find out? Take the sevenforums.com page as an example. Is it a secure login when i have given my username and password? Even when i am logged in (as now when i am writing this posting) it still shows www.sevenforums etc. in the address bar, i.e. no sign of https.
My System SpecsSystem Spec
06 Jan 2012   #8
FranzB

Windows 7 Home Premium 32bit, Linux Mint Julia, in dual boot mode
 
 

And another thing. Even if it is like you suggest, then why have an http as well as an https page where you can login?
Doesn't make sense. Why not simply remove the http page from the net?
My System SpecsSystem Spec
Reply

 A question re. http and https




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Next-gen HTTP 2.0 protocol will require HTTPS encryption...
Next-gen HTTP 2.0 protocol will require HTTPS encryption (most of the time) Source A Guy
News
Wireless connects; ping and ftp okay; no http/https
Added a wireless adapter(linksys AE3000) to my Win 7 ultimate desktop and am having issues. I can connect wireless to the router(linksys E4200), have a valid IP address, can ping internal and external addresses(by IP or name), can connect to ftp sites using FileZilla, but Chrome/IE/Firefox will...
Network & Sharing
Some sites won't open with "http" but with "https"
From some days I am experiencing this strange problem in Firefox. i am unable to open some sites with the "http://" address in Firefox it don't shows any error message or anything just a blank page. but if i edit there url to "https://" sites open normally. this is really annoying. please...
Browsers & Mail
https?
How do l get my browser type in only the https sites. My roommate thinks if I don't use the https. Then we are going to be hacked, jacked or who knows. Please can someone shed some light on this for me. Thank you
Network & Sharing
plz help https problem
For some reason https: sites from microsoft won't finish loading they just stay with the green circle forever. Also I am having seperate issues with javascript:(0)void error on other sites I don't know if the problems are related. Trying to log into Microsoft Connect from home and I don't know if...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:25.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App