Tag Archives: request to https

No HTTPS, Password Security, SOT Project, SSL Test Report

No HTTPS SB Nation

December 15, 2015 Admin Leave a comment

SB Nation’s login and signup forms load over insecure HTTP. They POST to a HTTPS endpoint.

https://www.sbnation.com automatically redirects to http://www.sbnation.com/

At the time of this report SB Nation is #40 on Quantcast’s United States Top 100 Sites list.

SB Nation’s SSL certificate is valid from July 9, 2015 until August 11, 2018.

Test sbnation.com on Qualys SSL Labs for yourself: https://www.ssllabs.com/ssltest/analyze.html?d=sbnation.com

Site: sbnation.com
Type: Log in form over http, Registration form over http, request to https
Needs protecting: Password
First identified: 12/15/15

No HTTPS Weather

December 14, 2015 Admin Leave a comment

Weather.com’s main login and signup forms loads over insecure HTTP and submit the request to a secured HTTPS endpoint. “Log In with Facebook” and “Log In with Google+” each open in a new window that is loaded over HTTPS.

Going to https://www.weather.com redirects to the http version.

At the time of this report, Weather.com ranks #18 on Quantcast’s top 100 sites in the United States.

Test dsx-secure.weather.com on Qualys SSL Labs for yourself: https://www.ssllabs.com/ssltest/analyze.html?d=dsx-secure.weather.com

Site: Weather.com
Type: Log in form over http, request to https
Needs protecting: Password
First identified: 12/13/15

Why does this matter?

No HTTPS Why does it matter

Submit a site

No HTTPS submission

See more…

No HTTPS posts

No HTTPS, SOT Project, SSL Test Report

No HTTPS Delta

December 13, 2015 Admin Leave a comment

Unsecured Delta.com site with login form loaded over HTTP

Delta.com page source showing the login form posts to a secured endpoint https://www.delta.com/custlogin/login.action

However, they do have a secured version of the homepage, but the unsecured site isn’t automatically redirected.

12/13/15 Delta.com SSL Labs report overview

12/13/15 Delta.com SSL Labs report detail

Test Delta.com on Qualys SSL Labs for yourself: https://www.ssllabs.com/ssltest/analyze.html?d=delta.com

Site: Delta.com
Type: Log in form over http, request to https
Needs protecting: Password
First identified: 12/13/15