Ko tenda hembiapoite sa’ivéta oñemba’apokuévo hese hembiapo porãve hag̃ua. Peteĩ jehaipyre nomoĩporãiramo ne apañuái ha eporanduséramo, roguerekohína ore nepytyvõ rekoha ikatútava ndeykeko @FirefoxSupport Twitter-pe ha avei /r/firefox Reddit-pe.

Avatar for Username

Eheka Pytyvõha

Emboyke pytyvõha apovai. Ndorojeruremo’ãi ehenói térã eñe’ẽmondóvo pumbyrýpe ha emoherakuãvo marandu nemba’etéva. Emombe’u tembiapo imarãkuaáva ko “Marandu iñañáva” rupive.

Kuaave

Ko téma oñeñongatúma. Ejapo porandu pyahu eikotevẽramo pytyvõ.

How do I know if sensitive info is being encrypted on a partially encrypted site?

  • 2 Mbohovái
  • 4 oguereko ko apañuãi
  • 6 Hecha
  • Mbohovái ipaháva cor-el

BoyBleu
BoyBleu
more options

The checkout page of a site shows with neither blue or green background for an https site. The security properties in FireFox 6.0.1 show "This site does not supply identity information" and "Your connection to this site is only partially encrypted, and does not prevent eavesdropping."

Would it be possible for FireFox to be able to indicate which objects are encrypted on a page?

If not, why would a vendor want to only partially encrypt their checkout page? Or is this just a poorly designed site? It is bad for their online business as it is a huge reason I would not use their site.

If it is common and industry accepted practice to have only partial encrypted pages, I would feel more comfortable knowing which fields/objects were encrypted. (specifically my personal information in a form).

Best regards

The checkout page of a site shows with neither blue or green background for an https site. The security properties in FireFox 6.0.1 show "This site does not supply identity information" and "Your connection to this site is only partially encrypted, and does not prevent eavesdropping." Would it be possible for FireFox to be able to indicate which objects are encrypted on a page? If not, why would a vendor want to only partially encrypt their checkout page? Or is this just a poorly designed site? It is bad for their online business as it is a huge reason I would not use their site. If it is common and industry accepted practice to have only partial encrypted pages, I would feel more comfortable knowing which fields/objects were encrypted. (specifically my personal information in a form). Best regards

Opaite Mbohovái (2)

the-edmeister
the-edmeister
  • Moderator
more options

See - https://support.mozilla.com/en-US/kb/Site+Identity+Button

If you click on the More Information button in the "doorhanger" that appears when you click on the S-I-B, you can open Page Info. Between the Media tab and the Links tab you can see exactly what isn't encrypted - has an http address rather than https.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

If there is content on a website that comes via a http connection then you get a partially encrypted connection and the Site Identity Button doesn't show blue or green.

You can see this on this forum is someone attaches an image that is on another site hosted and has a http: protocol link.
If data is send from a secure to an insecure link then Firefox will give a warning that can't be suppressed (Hotmail and MSN can show this).

It is up to you what to do in cases like this as it is hard to tell what content or links is causing this to happen.
You can contact the website if you think that it shouldn't happen (e.g. if money is involved).