Jisho

×
694ea0904ceaf766c6738166ed89bafb
2 Replies ・ Started by jdoe at 2017-04-28 00:43:49 UTC ・ Last reply by Kimtaro Admin at 2017-05-10 21:37:52 UTC

Firefox complains that passwords are not being transmitted using secure connection

When I move my cursor to the password field in the login form, Firefox displays a note stating the connection being used is not secure. For security, it would be a good idea to transmit passwords over TLS.

Screenshot: https://file.io/MBjZnu

694ea0904ceaf766c6738166ed89bafb
jdoe at 2017-04-28 00:58:23 UTC

I didn't realize file.io deletes files after the first download.

Here's another link to the screenshot: https://transfer.sh/g9ez2/screenshot.png

2986330e38386f92fee4774b0c54ed66
Kimtaro Admin at 2017-05-10 21:37:52 UTC

The form is transmitted securely in the background - if you inspect the traffic on the page you will see that it goes to https://jisho.auth0.com, which is Jisho's login provider. But since Jisho itself is served over http I think Firefox is incorrectly presuming that the form will be submitted over http as well.

It's not ideal, and switching Jisho over to https is on the roadmap.

to reply.