"Not secure" in Forum url

jonny2510

Just a bump to say this still isn't fixed (but really should be). This is an extremely poor way for such a popular site to process logins, especially in 2017.

gromituk

And a bump to say this still hasn't been fixed four and a half months into 2018! :eek: Just what is going on, MSE?

And there's worse. The password reset procedure emails you a new password in plain text that is neither single-use nor has an expiry date!

It is more than a year since MSE officially acknowledged this security flaw (in a mealy-mouthed way, implying that it's Google's fault).

Plus

Thanks MSE for finally implementing HTTPS after all these years people have been pointing out this massive weakness, inexcusable for a site covered in people's financial details. I can now use MSE without concern about my login password or cookies being stolen.

evenasus

I'm still getting the i in a circle sign and 'Your connection to this site is not fully secure' when I go to any of the forums.