Logging into Brizy.io is currently unsecure

Turnkey Webmaster

• December 16, 2020 04:57

Greetings,

For the past few days, whenever I log into Brizy.io to access the Cloud dashboard (https://www.brizy.io/account/login), I get a message "This connection is not secure" message in Chrome after entering username and password.

Here's a screenshot:

The URL changes from secure HTTPS (https://www.brizy.io/account/login) to unsecure HTTP (http://www.brizy.io/account/member) as my credentials flow through your server.

I click "Go back" button, which takes me to my Brizy account dashboard as a logged in user, rather than what it should do - send me back to the login screen without sending my account details unencrypted.

Once inside my Bizy account dashboard however, the URL becomes secure HTTPS again (https://www.brizy.io/account/member).

So it seems to me that Brizy usernames and passwords are passing through your servers unencrypted. Once inside the dashboard, encryption is restored.

Has your system been compromised? Or is there some other known issue? Should I change my Brizy platform password as a precaution?

Thanks,

Josh

0

• 

  Alex

  • December 16, 2020 14:16

  Hi Josh,

  It seems that this is a new problem that appeared after the last update of Google Chrome, so we don't have much to do in this case. It's a browser thing. Here's a discussion about this: https://support.google.com/chrome/thread/88331714?hl=en

  0
• 

  Turnkey Webmaster

  • December 16, 2020 14:55

  Thanks for the info Alex!

  0
• 

  Alex

  • December 17, 2020 17:06

  anytime ;)

  0

Please sign in to leave a comment.