Insecure password warning in Firefox

[VectorGamer]

Got this when trying to login to AA today.

 

Link for reference: https://support.mozilla.org/en-US/kb/insecure-password-warning-firefox?as=u&utm_source=inproduct

[Albert]

That is a misleading message, gotta' love when browsers play politics.. The popup login form exists on a regular http page, but it sends the form fields via https. I'm sure they are doing this as a lever to try and get more sites to go completely to https. Which is a good goal overall, but I hate when browsers do stuff like this. You can always use the following page to login, which sits on an https page and you should not get that warning:

 

https://atariage.com/forums/index.php?app=core&module=global&section=login

 

I cannot presently "fix" this, as the current forum software does not support https of the entire forum. The main problem is there is tons of user-generated content stored on servers outside AtariAge. This means that pages with such content (usually embedded images, videos, and other content sitting on third-party servers) will result in pages with a broken https warning. The newest version of the forum does support full https, but to do so requires caching third-party content and/or setting up a proxy so all content goes through https://atariage.com.

 

I plan on supporting full https for the forums (and the rest of the site--the store already does), but it'll take some work. I'm shooting to start working on upgrading the forum in January. It's going to take me at least a solid week of preparation, if not more (probably more), plus another week of headaches and consternation once I do upgrade the live forum..

 

..Al