Any other GMX webmail users, re: login page

abibee

When going to login using Firefox, it warns 'insecure content' 'unencrypted', and you have to select 'disable protection' to view the page normally. Similar in Chrome browser.

I'm right in thinking it's a new demand of these browsers to have better security? But, why hasn't GMX resolved this already? It's pretty slack of them. I could find no forum for them to enquire.

Is there a way around this, or does one just have to jump through the extra hoops to get logged in?

esuhl

It's fine for me when I try to log in via Firefox using HTTPS - the login page is fully encrypted with TLS 1.2, although Chrome reports that the page contains mixed content. :-/

cookie365

Just logged in to gmx webmail through Chrome (on a chromebook) and had none of the issues you describe.

esuhl

Just a thought -- it might be worth scanning your PC for malware, and checking that your security software isn't interfering with security certificates.

http://www.thesafemac.com/avasts-man-in-the-middle/

abibee

Odd, is it just me? I'm clean as far as I know (F-Secure IS, Malwarebytes premium, etc) and I'm a cautious user.

Insecure content info page for Firefox...

https://support.mozilla.org/en-US/kb/how-does-content-isnt-secure-affect-my-safety?as=u&utm_source=inproduct

I use HTTPS Everywhere too, that wouldn't affect it adversely?

esuhl

abibee wrote: »

I use HTTPS Everywhere too, that wouldn't affect it adversely?

I just tried a clean Firefox profile with HTTPS Everywhere and I don't get any mixed-content warnings on gmx.co.uk or gmx.com.

Weird. I'd run scans with MBAM and adwCleaner to check that your browser hasn't been compromised.

https://toolslib.net/downloads/viewdownload/1-adwcleaner/

Maybe try creating new browser profiles to see if they are also affected?

abibee

Ran Adwcleaner and it removed a couple things, but nothing stood out. As for GMX, still mixed content and necessary to disable protection to view it properly.

I'll look into trying a new profile tomorrow (it's late).

Firefox version 39.0, by the way, and the latest Chrome, whatever number that is.

Update: Just tried disabling HTTPS Everywhere in Firefox, and GMX loads fine, I think that must be the culprit, in my case at least.

tronator

abibee wrote: »

Update: Just tried disabling HTTPS Everywhere in Firefox, and GMX loads fine, I think that must be the culprit, in my case at least.

That's not the real solution. Not using HTTPS means your traffic could be intercepted and read by other people.

Check your PC's date. If it's wrong you might get those error messages.

cookie365

Turning off HTTPS Everywhere isn't the same as not using HTTPS

taxi97w

I found this with my Operamail account via Firefox. Turns out it was Avast Antivirus web browser monitor extension . I disabled the Avast web browser feature and it's been all clear since then.

tronator

cookie365 wrote: »

Turning off HTTPS Everywhere isn't the same as not using HTTPS

TBH I don't even know what exactly "Turning off HTTPS Everywhere" means. My FF doesn't have an option called that