Where's HTTP SSL on Hexus?

[azrael-]

Maybe change your Favourites/Bookmarks for Hexus to HTTPS? There are http versions that don't require high security, many other plain (no login/passwords to protect) sites don't need it either, HTTPS Everywhere is actually causing the problem for you.

http://hexus.net/tech/reviews/mainbo...x470-i-gaming/

http://hexus.net/

http://forums.hexus.net/

You don't need to login to read the content of any of the above, though the last one (Forum) will change to HTTPS as soon as you go another step deeper.

Like I wrote in my post I use HTTPS Everywhere which automatically redirects to the secure version of a page. It's quite obvious that I don't need to log in to read an article, but I'm made aware of the fact that the page is insecure. I *do* however need to log in to comment, and then I truly made aware of the fact that I'm logging in to an insecure site, with a padlock sporting a red cross and all.

Also, I don't have any bookmarks for Hexus. I actually go to the trouble of typing "hexus.net" in the address bar every single time and then follow the links from there.

[satrow]

So check what's triggering the insecure flag, I don't see it

[azrael-]

It's triggered because some (many?) pages and/or content on Hexus aren't/isn't secure.

Here's from just browsing the aforementioned review.



And this is what is shown when you're on a page with a login form.

[satrow]

Doesn't the arrow on the dropdown give further details? Does WF have 'View Page Info' on the default right-click menu so you can dig through the details given in the Media, etc. tabs?

[ik9000]

So? Paranoid about UK Gov snooping on your Hexus opinions?

Paranoid? what Garbage.

[Biscuit]

So? Paranoid about UK Gov snooping on your Hexus opinions?

What desire would any person have for a government, or a malicious entity unrelated to any government, to be able to access your data of this type?
Could also be far less political in motivation, e.g. just reporting a possible oversight/bug in the hexus site.

Find it strange when people accept and even defend unnecessary invasion rather than question it.

[MLyons]

That article work's 100% fine for me and I can't replicate the error you're receiving. Currently the site does allow you to visit on HTTP but will try to subtly push you over to HTTPS. If someone can get it to error while on the HTTPS version and send me a console log or network log in chrome/firefox dev tools that would be great. Then I can see exactly what content is breaking it and why.

[tfboy]

I've started to play around with KeePass and chromeIPass to manage passwords for websites.
I cannot get it working with Hexus using Chrome.
Also:
- Main page doesn't redirect to https
- More worrying, I don't seem to have any way to log in securely over https. If I manually type in https, I still don't get a fully secure connection. Maybe there are some media elements served over http, but I don't like the idea of submitting username and password if I cannot guarantee that everything is secure (providing the green https bar).

From the above posts, I thought this had been rectified. Am I missing something?

[jimbouk]

From a quick search of this page's images, it looks like your (broken) Skype link is http:

<img src="http://mystatus.skype.com/smallicon/tokenfrenchboy" alt="Send a message via Skype™ to tfboy" title="Send a message via Skype™ to tfboy">

This looks like something which needs updating on the Hexus side as you only provide the Skype username, however I'm not sure this works at all anymore...

An auto HTTP to HTTPS redirect on landing would be good though, I keep ending up on http://hexus.net, click the link to the forum as http://forums.hexus.net/ and have to manually have to change the url as I'm not/won't login not on HTTPS.