Unable to securely login to grantvillegazette.com

[phule]

How can I securely login to a site if it doesn't use http at anytime?

If I try to force an HTTPS connection using NoScript to http://www.grantvillegazette.com , Firefox won't allow me to connect at all.

[therube]

I get the same (not that I'm sure what to expect anyhow).

Originally loaded the page as is.
Then added http://www.grantvillegazette.com as Force HTTPS.

Tried opening grantvillegazette in a new tab. Nothing.

Entering bogus un/pw in the existing page returned an error message.

Note that the URL did (at some point) change from http: to https:, again not that I know what that means?

Code: Select all

[NoScript HTTPS] Forcing HTTPS policy on http://www.grantvillegazette.com/

I assume that the page simply will not work in https: - as in the site does not know what https: is, not configured to support it at all?

[Giorgio Maone]

Yes, the site does not support HTTPS at all.
There's no way to login securely there.

[phule]

Yes, the site does not support HTTPS at all.
There's no way to login securely there.

Not very smart when they expect people to send them money (by way of credit card) just to be able their stories each month

[Tom T.]

Yes, the site does not support HTTPS at all.
There's no way to login securely there.

Not very smart when they expect people to send them money (by way of credit card) just to be able their stories each month

In the US, you have to take training and pass an exam to become a doctor, lawyer, Realtor, or even a hair stylist or manicurist, but not to run a web site or call yourself a web site designer. Very strange, since a broken web site can do much more harm than a broken fingernail.

Send them a check. Or perhaps they'll auto-draft your bank account by AFT, which is better than sending your credit card number by a banner towed by an airplane. GL.

[dhouwn]

The port is open though: http://www.grantvillegazette.com:443/

[Giorgio Maone]

The port is open though: http://www.grantvillegazette.com:443/

Yes, but they configured it to serve plain HTTP.
Worse than keeping it closed, because generates useless confusion.