Why is meet.churchofjesuschrist.org not secure?

[slloyd]

When I go to meet.churchofjesuschrist.org it asks me to authenticate then says the site I am going to is insecure and that my info will be open for others to see.
I am not willing to let my church auth credentials to be submitted on a non-secure site.

In my opinion this is a critical issue.

[russellhltn]

That's interesting. I know I didn't get that before.

They're having some issues with having it work right with multiple callings, so they're likely making changes. I'd try again later.

[lajackson]

That's interesting. I know I didn't get that before.

I have gotten the message every time I have entered the site.

[slloyd]

Until it is fixed I am not willing to go there. There are SO many crawlers out there looking for stuff like this so they can steal your credentials.

[russellhltn]

Interesting. It seems to be something in the transition. When I arrive at "meet", it's secured.

Edit: and now that I'm logged in, I'm not getting it at all.

[lajackson]

Edit: and now that I'm logged in, I'm not getting it at all.

I just noticed that I do not get it when I am signed in. Only when I am not yet signed in and am in the process of signing in through the double unfocused sign on system.

[catmulls]

I have the same problem. What I am seeing through network tracing is:

Request URL: https://meet.churchofjesuschrist.org/
Request URL: https://ident.churchofjesuschrist.org/s ... /authorize?...
data:image/png;base64,...

I do not know much about "data URLs" but if that is the one triggering the "Information you're about to submit is not secure" that feels safe. Until I find out more I am not going to complete the authentication either.

The data URL is a "i" with a circle around it.

[catmulls]

I analyzed with WireShark (not an expert) and did not see any http packets going out of my network from the computer I attempted to go to meet.churchofjesuschrist.org.

It looks like it could related to recent browser changes. Here is a discussion about Chrome 87 (https://bugs.chromium.org/p/chromium/is ... id=1158169).

[lajackson]

It looks like it could related to recent browser changes.

I use Firefox and see the same thing.

[lajackson]

I just noticed that I do not get it when I am signed in. Only when I am not yet signed in and am in the process of signing in through the double unfocused sign on system.

I do not know if someone noticed my wry comment about the sign on system, but it is now focused, and I would be remiss in not thanking whoever made the change. I sign on so often it has been difficult to adjust to the two screen system, and it was even more frustrating when I had to find my cursor and aim it at the box on the first sign on screen to begin.

But I did notice that the first screen now does focus on the login box, and I am grateful for that little change.

Thank you.