Forum Discussion
"MY ACCOUNT" secure or not?
A while back someone asked why My Account doesn't seem to be a secure site. Was there a response from HN? If there was a response I can't find the thread. Is My Account still not secure?
Hi Reggie,
I know it's been a while, but I wanted to update you on this topic. I was informed recently that an update was done which addressed secure pages for myAccount across the board.
Thanks,
Amanda
Hi Gabe -
Disclaimer I am not an expert on this topic nor is this any official answer: I assume that this means the login process and redirects during the login process are all secure. So in order to get to your actual account information you'd have to pass through a secure login area. If I am seeing everything correctly, credit card or banking information inputs are on secure popups too. To me the message about not putting in your info to the site because it can be seen doesn't apply, since the places you input your payment info into is not entered or stored on the "unsecure" page.
I think there is some differentiating between Info/Not Secure vs Not Secure/Dangerous. Ref: https://support.google.com/chrome/answer/95617?visit_id=1-636574194222761387-1264375423&p=ui_security_indicator&rd=1
We're still waiting but just wanted to throw in my 2 kopeks
~Amanda
Amanda,
Yes, the popups for credit card info are definitely secure. I was only showing that the main page wasn't secure, though the sign on info is.
With that said, I was just a litlte concerned about the Account Information and Profile page, which also includes personal info (though not as important as credit card info or anything like that), but isn't secure. There's also no indication of whether the popups for changing personal info, like email, phone number or address, is secure.
If the "s" in https means secure can anyone explain this?
That's this Community, and this Community is definitely secure. It's the MyAccount site that is the problem. At least some of the popups on the site, like when you go to add a payment type (and I assume change it) are secure, but the pages themselves aren't.
What Amanda mentioned about having to go through the sign in process and such may very well be true, but we'll know once the engineers pore over it. With this said, after signing in to this Community, I can right click on MyAccount at the top of the page and choose to open it in a new page, and if I've already signed into the site previously it goes straight to the MyAccount site without having to go through the sign on process again, so I don't know if that means it's still secure, if it ever was in the first place.
It's a riddle, wrapped in a mystery, inside an enigma.
