Fx Nightly 50.0a cannot login to plain http site

[hssg]

Firefox 50.0a in private browser mode fails to log into http://bato.to, site redirects to https and than login dumped.

[barbaz]

Off-topic to viewtopic.php?f=7&t=21952 , splitting.

Does disabling NoScript (Tools > Add-ons Manager > NoScript > Disable > Yes, remove ALL protections) get it working?
If so, when this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

[hssg]

Off-topic to viewtopic.php?f=7&t=21952 , splitting.

Does disabling NoScript (Tools > Add-ons Manager > NoScript > Disable > Yes, remove ALL protections) get it working?
If so, when this issue occurs, do you see anything related in the Browser Console? (Ctrl-Shift-J)
(if you don't know what's related, turn off CSS warnings and post everything else you see)

It's cannot login because Automatic Secure Cookies management is enabled,

Code: Select all

[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: session_id=a26afdbbe9e36e3c846c9a8b197c5725; domain=.bato.to; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: member_id=324235; domain=.bato.to; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: pass_hash=fbbc59edf42c9a739c7b5560c90ffdc9; domain=.bato.to; path=/; HttpOnly; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: ipsconnect_d8874f8d538b1279c8106e636bf7afe9=1; domain=.bato.to; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: coppa=0; domain=.bato.to; path=/; Secure
[NoScript HTTPS] AUTOMATIC SECURE on https://bato.to: session_id=a26afdbbe9e36e3c846c9a8b197c5725; domain=.bato.to; path=/; HttpOnly; Secure
Password fields present on an insecure (http://) page. This is a security risk that allows user login credentials to be stolen.[Learn More]bato.to

But bato.to is not forced to https by me. it's doing on it's own.

I can solve this problem by adding url to "Ignore unsafe cookies" field though.
And these messages not show up with it.

[barbaz]

I can solve this problem by adding url to "Ignore unsafe cookies" field though.

Great! That's the answer

[Thrawn]

And then complain to the website owner, because they are using quite unsafe practices; it's possible for someone to eavesdrop on your connection and hijack your logged-in session.