Apple Support Forum Login - no SLL encryption?

[munkery]

I just noticed when I went to log in to the Apple Support Forum to post for the first time that the login page does not display the lock for it's security credentials in the upper right corner of Safari.

Is this potentially an issue given that it asks for your AppleID that is used for iTunes?

The webpage url starts with "https://" but it does not display the lock.

 

[emiljan]

As long as you see the https:// it means the connection is secure. Depending on how the page is setup the lock icon might now show.

 

[munkery]

Thanks, I read somewhere that a "https" page will not show the lock if elements on the page are not from the same domain given that the elements can potentially make the page not secure.

It is kinda funny that it doesn't have the lock considering apple's own documentation states the following:

Usually, if these three conditions are met, the page can be considered secure:

1) The lock icon appears in the top right corner of the Safari window
2) The page's URL begins with "https"
3) You trust the organization that created the website (if you do not know or trust them, consider submitting information to them via phone instead).

I believe you have to view the certificate to verify that the site belongs to the organization that you trust.

EDIT: Found out that not displaying the lock on https webpages when the page contains potentially insecure elements is a security feature. It is meant to let the user know that insecure elements are contained in the webpage. Nice to know that Safari has this feature.