Mozilla Firefox 44 will warn users when they attempt to log in to a website that sends the password over HTTP. In this case, the open source browser will display a warning stating that the connection is not secure and the credentials can be stolen.
That Richard Barnes from Mozilla via Twitter announced. The measure is now in an early version of Firefox 44 for testing. In case a website login via HTTP sends the browser's address bar will show a red line through a lock. The warning also appears in login forms that are offered via HTTP, but send the completed data over HTTPS. According to Barnes, an attacker can steal in such a case via JavaScript password before the user clicks login. The final version of Firefox 44 is scheduled for January 26, 2016.
No comments:
Post a Comment