https - is my logon secure?

  • 2
  • Question
  • Updated 6 years ago
  • Answered
I noted that when I logon to your website the address is using http not https. This means that my password is in the clear. Is there a way to logon using https for secure authentication?
Photo of linda

linda

  • 1 Post
  • 0 Reply Likes

Posted 6 years ago

  • 2
Photo of Nathan

Nathan, Champion

  • 3739 Posts
  • 307 Reply Likes
Hello Linda,

The login form is submitted to an https page meaning that it is secure.

Can you let me know what you mean by "my password is in the clear"? If you mean that it isn't secure, don't worry, it is :)

Maybe Yola could add the SSL Certificate to the login page someday so users will be able to see that it is secure.

Nathan
Photo of Gop

Gop

  • 7473 Posts
  • 2115 Reply Likes
Hi Nathan,

I didn't know that about the secure submission. is there a way to see and or test this?

There has been a lot in tech press about secure logins and a suggestion that it should be right near the top of requirements when scouting for a host. If we could direct a client to this for proof then I think that this would increase the sense of protection for site owners particularly clients whos sites are being built for them.
Photo of Nathan

Nathan, Champion

  • 3739 Posts
  • 307 Reply Likes
Hi Gop,

You're right, there has been a lot of tech press about secure log ins. Yola could (probably) add the SSL certificate to the login page, but not for the "login" drop down box because no one wants https for the whole site unless you're entering sensitive information.

I found this out by looking at the page source. Since it is submitted to a secure page via AJAX, there is no way to check this unless you look at the source. (And who does that? Only people that know about it)

Yola: I suggest that you guys add the SSL (https) to http://www.yola.com/login to confirm that the user's login credentials are secured.

Nathan
Photo of dante

dante

  • 82 Posts
  • 15 Reply Likes
That is right yola is very late to start to use https for login page. and we don't have any backup feature for our webpage to. Yola user can get hack vary easy.

Photo of Nathan

Nathan, Champion

  • 3739 Posts
  • 307 Reply Likes
Hi Dante,

Can you provide the steps you took to see this? When I go to yola.com I don't see that. Where are you seeing that error?

Thanks,
Nathan
Photo of Brianna

Brianna

  • 2045 Posts
  • 92 Reply Likes
Hi folks,

We want to reassure you that your website is secure with Yola. The servers that host Yola and the sites you publish and host with us are located in the United States in state of the art data centers. We spend a significant amount of time and money to ensure that these servers are maintained, configured and administered in the best way that is technically possible. We have a team of engineers that are dedicated to doing just that - it is our job to make sure the infrastructure that supports Yola is the best you can find.

While it is not possible to add an SSL certificate to a Yola website at this time, we can assure you that your website and account security is taken very seriously on our end.
Photo of Gop

Gop

  • 7473 Posts
  • 2115 Reply Likes
So now is https a redundant or second grade security in website login?