Who do you believe? AT&T or 1Password? Secured vs Unsecured Page
Yes, the page isn't HTTPS but the login pane shows a lock. Does that pane have HTTPS while the main page does not?
1Password Version: 1Password Version 5.3 (530029) Mac App Store
Extension Version: 4.3.1
OS Version: 10.10.3 (14D136)
Sync Type: Dropbox
Comments
-
Hi @invalidptr,
While your details are eventually passed over an SSL connection (https://www.att.com/olam/loginAction.olamexecute by the looks of it), the page you are entering your login credentials is not secure and that lock image is merely PNG file on AT&T's server
For why this is bad I will let Troy Hunt to a far better job of explaining than I ever could - Your login form posts to HTTPS, but you blew it when you loaded it over HTTP. I think you will find it a very informative read :smile:
I don't have an AT&T account to test with but you might find the above URL is a better one to store and use. If you don't mind please do let us know if it works, that would allow others to benefit from your discovery :smile:
0
