Forum Discussion

Thunderhelper's avatar
Thunderhelper
Copper Contributor
Dec 03, 2019
Solved

We've detected an insecure login form

The pop up below is displayed when I login to certain sites. It seems to be something that started recently, but I can't say for sure. It mentions LastPass, which I'm using, but I can't find this message associated with LastPass and I don't get this pop up on the "old" Edge browser, just the chrome version (Version 80.0.334.4 (Official build) dev (64-bit)).

 

The URL on the address bar has https, and the message has a different address, passport.aliexpress.com vs the URL of http://www.aliexpress.com. I'm assuming that is their authentication server. I traced the requests in F12 network tab and don't see anything that isn't https. 

 

1. Is the browser showing that message, or the LastPass extension?

2. What is making it insecure?

 

It makes me think my login info is about to be spewed all over the internet. Wondering if that is true or just a quirk in the new browser.

 

Any insights would be appreciated.

 

  • Hi Thunderhelper 

    since you mentioned this problem started happening recently

     

     

    the orange flag was added recently to the Edge insider (look at the version).

    you can try turning on and off both orange and green flags and see if they fix your problem.

     

    which Edge insider version are you using?

3 Replies

  • Hi Thunderhelper 

    since you mentioned this problem started happening recently

     

     

    the orange flag was added recently to the Edge insider (look at the version).

    you can try turning on and off both orange and green flags and see if they fix your problem.

     

    which Edge insider version are you using?

    • Thunderhelper's avatar
      Thunderhelper
      Copper Contributor

      HotCakeX Well, I was using Version 80.0.334.4 (Official build) dev (64-bit) then, in the middle of trying out what you mentioned below, it updated to Version 80.0.345.0 (Official build) dev (64-bit).  FWIW, this setting "Blockable mixed content switch as site setting" only became available after the update.

       

      Regardless, something helped - either toggling the settings or the new version.  Now I don't get that pop up any longer. 

       

      Thanks for the advice!
      David

      • HotCakeX's avatar
        HotCakeX
        MVP
        You're welcome, glad to know it's fixed 🙂

Resources