Troy Hunt

@troyhunt

When are you going to fix this @Qantas? You're asking people to provide sensitive info whilst the browser warns the… https://t.co/Llx7qfg2QO

Qantas

@Qantas

@troyhunt Hi Troy, as per our privacy policy, all customer information is submitted using SSL forms and all private information (1/3)

Qantas

@Qantas

@troyhunt is passed back using SSL, so even though the browser might indicate that the session is not secure (2/3)

Qantas

@Qantas

@troyhunt because it is mixed mode, the transmission of customer information is definitely secure. (3/3)

Troy Hunt

@troyhunt

I'm going to spell this out for @qantas and all other interested parties: You have SSL (by which you mean TLS) beca… https://t.co/TKzI532NYV

Troy Hunt

@troyhunt

...protect against someone intercepting traffic. If you can intercept traffic then you can read OR MODIFY the traffic. Chrome reports... 2/4

Troy Hunt

@troyhunt

...the page as being insecure as you can't trust it hasn't been modified. You're wrong, Chrome is right, get someone who knows what... 3/4

Troy Hunt

@troyhunt

...they're doing to fix it. Here's a tutorial for them: https://t.co/psnD9mKUmh 4/4