The Top Easy Access Savings Discussion Area

I-LOV-MONEY

tel_ wrote: »

Even when I try Nationwide's log-in page in Chrome it still says it's non-secure. Is this not so much of an issue though, as you do have to input your card reader code into it? Which is unique every time you log into it.

I have just gone to the Nationwide site, and their front page onwards is all https . I am using Firefox browser.

masonic

tel_ wrote: »

Even when I try Nationwide's log-in page in Chrome it still says it's non-secure.

When I visit Nationwide, even their main site, in Chrome, I get a secure page. Even if I deliberately enter http:// to go to a non-secure version of the site, I get redirected to https://

If you are seeing the 'Not secure' indicator then that is cause for suspicion.

Is this not so much of an issue though, as you do have to input your card reader code into it? Which is unique every time you log into it.

It is an issue because it means that the code you generate can be intercepted and used, so then a bad guy would be logged into your account and you would see a replica webpage created by them from your data, which they now have...

Internet Explorer doesn't seem to alert me at all when using Nationwide's site.

It should be showing you that the site is secure. It doesn't alert you to non-secure sites (yet). Chrome only started doing so recently.

I-LOV-MONEY

@tel_ double check you have https://www.nationwide.co.uk/ and not .com as that could be mistaken for the genuine building society as it refers to investements and insurance. So make sure you have the address highlighted in bold.

tel_

I did try Nationwide's website this morning, and it does seem to be secure.

Thanks to the people highlighting this issue, as I did wonder why some banks sites were coming up non-secure. Surely this is a basic security flaw that all banks should had addressed by now?

I now have all my banks log-in pages saved as favourites instead

I-LOV-MONEY

I am surprised any bank site is not secure. Please let me know which bank has a non-secure site.

dekkard

I-LOV-MONEY wrote: »

I am surprised any bank site is not secure. Please let me know which bank has a non-secure site.

Here you go:

http://www.theaa.com/savings-accounts/manage-your-savings

masonic

dekkard wrote: »

Here you go:

http://www.theaa.com/savings-accounts/manage-your-savings

AA has both secure and non-secure:
https://www.theaa.com/savings-accounts/manage-your-savings

I-LOV-MONEY

Strange. With the non-secure site; as soon as you click 'login' it goes to a secure site.



If I had my 'hard-earned' tied up with them, I would always make sure I logged into the secure site from the start.

dekkard

I-LOV-MONEY wrote: »

Strange. With the non-secure site; as soon as you click 'login' it goes to a secure site.



If I had my 'hard-earned' tied up with them, I would always make sure I logged into the secure site from the start.

Yes, I think it’d be hard to find a bank that has a non-secure login page. The thing is that all pages that link to secure login pages need to be secure themselves. Otherwise, a man in the middle type attack is a risk.

Futuristic

Natwest updated savings builder 1.50% up to £10k now (from 5k)
https://personal.natwest.com/personal/savings/savings-builder.html