anzshareandbondtrading.co.nz insecure?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › anzshareandbondtrading.co.nz insecure?

grasshoper

164 posts

Master Geek

#168565 18-Mar-2015 14:53

perhaps I am just noob, but am I correct in saying its a security risk having this site not providing ssl? It seems if I manually add https into the browser it will load as secured, but when I just type in the address it loads unsecured?

Assuming I'm wrong, but just wanted clarification

http://www.anzshareandbondtrading.co.nz/static/home.aspx

timmmay

20591 posts

Uber Geek

Trusted

Lifetime subscriber

#1261755 18-Mar-2015 15:03

The login form submits via https, but you can't tell unless you look at the source for the page. It's not good practice but I think it's secure. It would make me nervous about their security though, them doing something like that.

freitasm

BDFL - Memuneh
79319 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1261759 18-Mar-2015 15:05

Bad, bad practice. Sent to them via Twitter.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1261760 18-Mar-2015 15:09

How did you get to it on an unsecured page?

If you use the normal login from the main front ANZ page (used by Internet banking etc) it's all via HTTPS

rscole86

4980 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#1261761 18-Mar-2015 15:10

Temporary issue? Whenever I try to visit now it re-directs to their https site.

EDIT:
It appears Chrome on a failed log in, ie submitted with no details, will re-direct to the secure page. IE also does this, however Chrome will now always re-direct to the secure page even if ou try to navigate aware. IE allows you to visit the non-secure page still.

grasshoper

164 posts

Master Geek

#1261774 18-Mar-2015 15:25

its the share and bond trading website that does it, not the anz banking site. they are separate. I use it to buy and sell shares so wanted to make sure it was secure..I might find another share broker in the future. Glad to know its actually submitted via https though... Cheers.

heres a link:

http://www.anzshareandbondtrading.co.nz

rscole86

4980 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#1261780 18-Mar-2015 15:34

What Steve was trying to say, is that if you go to www.anz.co.nz and then select which part of the site you want to log into, it will re-direct to the https site for you.

muppet

2572 posts

Uber Geek

Trusted

#1261781 18-Mar-2015 15:39

I logged in just fine as you grasshoper. Your account seems secure to me.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

maxeon

1279 posts

Uber Geek

ID Verified

Lifetime subscriber

#1261802 18-Mar-2015 16:00

The page works on https as well.
https://www.anzshareandbondtrading.co.nz/static/home.aspx

I think they enabled http as well rather than doing a redirect to https.