Sign on page to these forums

[dslr595148]

#1 I went to http://forums.verizon.com/

#2 I clicked on Sign On.

#3 I was sent a URL starting with HTTP, then a URL starting with HTTPS, and then a URL Starting with HTTP.

I am just wondering...

Is this happening for anyone else?

Please and thanks.

PS. The details are by clicking on Sign On, on that page..

#1 Sent to

http://forums.verizon.com/t5/authentication/ssoredirectpage?action=login&referer=http%3A%2F%2Fforums...

#2

https://signin.verizon.com/sso/authsso/forumLogin.jsp?goto=http%3A%2F%2Fforums.verizon.com%3A80%2Fvr... 

#3 

http://www22.verizon.com/content/sso/signin.aspx?goto=http://forums.verizon.com:80/vrzn/vrzn_sso?referer=http%3A%2F%2Fforums.verizon.com%2  

#4 and then I could select the type of log-on, and log in..

[KaLin]

  I checked for you and Verizon login pages are under SSL and what you are showing is the expected behavior.

[dslr595148]

---

@KaLin wrote:

  I checked for you and Verizon login pages are under SSL and what you are showing is the expected behavior.

---

Really?

Please, explain why I am getting this error

http://i45.tinypic.com/j1349j.jpg

^^

PS. To log-in I changed the URL so that it starts with HTTPS, but users should not have to correct the URL.

[EDIT] I went to Start -> Run. I typed in cmd and pressed enter. Then I typed in arp -a and pressed enter. My network is not being ARP Poisoned.

[TheGreatOne]

I get this message when logging into the Verizon Forums...

http://img109.imageshack.us/img109/5175/messageo.png

Click once on the picture to zoom in on the message to read it.

[dslr595148]

---

@TheGreatOne wrote:

I get this message when logging into the Verizon Forums...

http://img109.imageshack.us/img109/5175/messageo.png

---

I got that same message after..

#1 Changing the URL so that it starts with HTTPS.

#2 Select what kind of account I have.

#3 Entering the user name and password.

#4 And pressing sign on.

^^

[Justin46]

---

@TheGreatOne wrote:

I get this message when logging into the Verizon Forums...

http://img109.imageshack.us/img109/5175/messageo.png

Click once on the picture to zoom in on the message to read it.

---

I also get this message, have for a long time. I am pretty sure it is a Firefox generated message, I don't get it logging in using any other browser. If you watch the URL field at the top, when you start the log-in process it is http, but once you fill in the name and password and hit the log-in button or the Enter key it changes to https. So I think it is a false warning in that what Firefox sees originally is the http but the info is really being send over a secure connection. Not sure why Verizon doesn't make the entire log-in process secure.

At least this is my guess....but since it does show https during the actual login process I have never worried about it (note that it does show https in the picture).

__________________________________
Justin
Verizon FiOS TV, Internet, and phone
QIP6416-P1, IMG 1.7C, Build 09.83
Keller, TX 76248

[dslr595148]

---

@Justin wrote:

I also get this message, have for a long time. I am pretty sure it is a Firefox generated message, I don't get it logging in using any other browser. If you watch the URL field at the top, when you start the log-in process it is http, but once you fill in the name and password and hit the log-in button or the Enter key it changes to https. So I think it is a false warning in that what Firefox sees originally is the http but the info is really being send over a secure connection.

---

I checked your claim by using Wireshark (formally known as Ethereal) to see if I could see the log-in info in the clear.

#1 I could see the log-in when I tried it on http://www.dslreports.com/login/

#2 But I could Not when I tried to log-in to this site, even without HTTPS in the URL.

Very interesting.

---

@Justin wrote:

Not sure why Verizon doesn't make the entire log-in process secure.

---

Neither, do I.

[Justin46]

---

@dslr595148 wrote:

I checked your claim by using Wireshark (formally known as Ethereal) to see if I could see the log-in info in the clear.

#1 I could see the log-in when I tried it on http://www.dslreports.com/login/

#2 But I could Not when I tried to log-in to this site, even without HTTPS in the URL.

Very interesting.

---

Thanks for taking the time to do that, I of course was guessing. Strange way for Verizon to do things huh.....

__________________________________
Justin
Verizon FiOS TV, Internet, and phone
QIP6416-P1, IMG 1.7C, Build 09.83
Keller, TX 76248