I have created a Stack Exchange account and have found that the login page does not use HTTPS/SSL.

I do not like to login without this protection, so is there a way to log in with HTTPS/SSL?

migrated from stackoverflow.com Jun 22 '11 at 10:13

This question came from our site for professional and enthusiast programmers.

  • 3
    All login links uses HTTPS/SSL; where you found it which do not uses https/ssl? – Harry Joy Jun 22 '11 at 10:08
  • OK this is just a guess: May be you have clicked on login link at the top in SO or any other SE site. Which have take you to the page something like this. This page do not use HTTPS/SSL but this is also not the page where you enter your password. This is just to select the account type by which you want to login. After you select account type it will take you to the respective site which uses HTTPS/SSL. SO don't worry your information will be secure no one is gonna hack your account.... :) – Harry Joy Jun 22 '11 at 11:05
  • @Harry is what you say still valid now that SO is an OpenID provider, though? – Pëkka Jun 22 '11 at 11:13
  • Ah, fair enough, it is. SO's OpenID signup is https. – Pëkka Jun 22 '11 at 11:14

Stack Overflow's OpenID signup/login page is indeed not on a https:// URL, but it contains an iframe element that holds the login and signup forms. That iframe is encrypted:

enter image description here

it admittedly looks a bit misleading, but everything is in order here.

  • you mean to say there is a login link which is not HTTPS? – Harry Joy Jun 22 '11 at 11:28
  • @Harry no. Edited to clarify – Pëkka Jun 22 '11 at 11:28
  • Thanks for clarifying this. Unfortunately I cannot vote up yet. – prockel Jun 22 '11 at 12:28
  • 12
    No, everything is not in order. If a page is asking me to login, it should be and appear properly secured. Otherwise, how do I, the user, know that tomorrow everything is still in order?? – Lawrence Dol Jan 19 '13 at 3:14
  • @SoftwareMonkey, exactly – Pacerier Mar 9 '13 at 7:04
  • 1
    We are discussing this to a greater extend over here: meta.stackexchange.com/questions/202518/… – nottinhill Oct 22 '13 at 10:02

Everything in the path is HTTPS now, as it should be in the final version. We'll be deploying secure-only cookies soon.

You must log in to answer this question.