Apple Support Forum Login - no SLL encryption?

Discussion in 'Mac Apps and Mac App Store' started by munkery, Oct 10, 2010.

  1. munkery macrumors 68020


    Dec 18, 2006
    I just noticed when I went to log in to the Apple Support Forum to post for the first time that the login page does not display the lock for it's security credentials in the upper right corner of Safari.

    Is this potentially an issue given that it asks for your AppleID that is used for iTunes?

    The webpage url starts with "https://" but it does not display the lock.

    Attached Files:

  2. emiljan macrumors 6502


    Jan 25, 2010
    As long as you see the https:// it means the connection is secure. Depending on how the page is setup the lock icon might now show.
  3. munkery thread starter macrumors 68020


    Dec 18, 2006
    Thanks, I read somewhere that a "https" page will not show the lock if elements on the page are not from the same domain given that the elements can potentially make the page not secure.

    It is kinda funny that it doesn't have the lock considering apple's own documentation states the following:

    I believe you have to view the certificate to verify that the site belongs to the organization that you trust.

    EDIT: Found out that not displaying the lock on https webpages when the page contains potentially insecure elements is a security feature. It is meant to let the user know that insecure elements are contained in the webpage. Nice to know that Safari has this feature.

Share This Page