anzshareandbondtrading.co.nz insecure?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › anzshareandbondtrading.co.nz insecure?

grasshoper

164 posts

Master Geek
+1 received by user: 6

#168565 18-Mar-2015 14:53

perhaps I am just noob, but am I correct in saying its a security risk having this site not providing ssl? It seems if I manually add https into the browser it will load as secured, but when I just type in the address it loads unsecured?

Assuming I'm wrong, but just wanted clarification

http://www.anzshareandbondtrading.co.nz/static/home.aspx

timmmay

20858 posts

Uber Geek
+1 received by user: 5350

Trusted

Lifetime subscriber

#1261755 18-Mar-2015 15:03

The login form submits via https, but you can't tell unless you look at the source for the page. It's not good practice but I think it's secure. It would make me nervous about their security though, them doing something like that.

freitasm

BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1261759 18-Mar-2015 15:05

Bad, bad practice. Sent to them via Twitter.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1261760 18-Mar-2015 15:09

How did you get to it on an unsecured page?

If you use the normal login from the main front ANZ page (used by Internet banking etc) it's all via HTTPS

rscole86

4999 posts

Uber Geek
+1 received by user: 462

Moderator

Trusted

Lifetime subscriber

#1261761 18-Mar-2015 15:10

Temporary issue? Whenever I try to visit now it re-directs to their https site.

EDIT:
It appears Chrome on a failed log in, ie submitted with no details, will re-direct to the secure page. IE also does this, however Chrome will now always re-direct to the secure page even if ou try to navigate aware. IE allows you to visit the non-secure page still.

grasshoper

164 posts

Master Geek
+1 received by user: 6

#1261774 18-Mar-2015 15:25

its the share and bond trading website that does it, not the anz banking site. they are separate. I use it to buy and sell shares so wanted to make sure it was secure..I might find another share broker in the future. Glad to know its actually submitted via https though... Cheers.

heres a link:

http://www.anzshareandbondtrading.co.nz

rscole86

4999 posts

Uber Geek
+1 received by user: 462

Moderator

Trusted

Lifetime subscriber

#1261780 18-Mar-2015 15:34

What Steve was trying to say, is that if you go to www.anz.co.nz and then select which part of the site you want to log into, it will re-direct to the https site for you.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

muppet

2642 posts

Uber Geek
+1 received by user: 1660

Trusted

#1261781 18-Mar-2015 15:39

I logged in just fine as you grasshoper. Your account seems secure to me.

maxeon

1279 posts

Uber Geek
+1 received by user: 106

ID Verified

Lifetime subscriber

#1261802 18-Mar-2015 16:00

The page works on https as well.
https://www.anzshareandbondtrading.co.nz/static/home.aspx

I think they enabled http as well rather than doing a redirect to https.