Kitz Forum
Internet => General Internet => Topic started by: UncleUB on October 10, 2010, 11:10:35 AM
-
Hi all
I have just logged onto my O2 account to buy a new PAYG phone.When I first looged on the connection was secure(golden padlock and the blue bit on the screen capture below showing its a secure connection
(http://i246.photobucket.com/albums/gg87/UncleUB/O2Secure.jpg)
But as soon as I visited the shop part and added the phone to basket,proceeded to checkout,the connection wasn't secure and when it came to the credit card bit the golden padlock had an exclamation mark over it and there was no blue section in the address bar.I obviously didn't proceed.
This was the screen capture when I got to where you put in your card details
(http://i246.photobucket.com/albums/gg87/UncleUB/O2Unsecure.jpg)
I do online shopping a lot and have never encountered this problem before,any ideas.
-
I think you're right to be suspicious. It suggests that the web page in question hasn't been properly set up, so although it's an https address it may still not be secure. The only other possibility I can think of is a browser bug, so it might be worth trying with a different browser.
-
Further to roseway's sound advice.......did you at any point log out from account. I only ask as in the second, "unsecured" screenie the url would indicate that a "guest" not a "user" is on line ?
-
Thanks guys,
No I didn't log out and I have also tried using Opera as well as Firefox with the same results.
As I have said all other secure transaction on other sites are fine.
As an example I just went to the T mobile site,added a phone to basket,proceeded to check out and straight away it was secure,BEFORE I had even put in any personal details or created an account.
Edit,just tried IE8 as well,and none of the site was secure using that....I tried the T Mobile site again,and as soon as It went to ask for personal details,it was secure.
Edit 2.....I have ordered via the telephone to be on the safe side.
-
Just had a reply from O2 by email
Thanks for replying to Srikanth's email and I'm sorry that you feel our
website is not completely secured.
Please be assured that our service to buy Pay & Go mobile phones online
is completely secured. For more confirmation the website address given
below starts with 'https' which means its secured.
https://registration.o2.co.uk/o2/webtopup/mobiledetailsprepare.do
To know the reason you noticed a security warning that said that the
connection was only partially encrypted, you'll need to contact your
Internet service provider for further help.
When I click on the link in the reply,it starts out with the Blue secure section,but as soon as the page loads fully the blue section has gone and the page is not secure.
-
I've just tried that link, and the padlock in the bottom right corner of the FF window has a red line through it. Despite what they say, it isn't secure (or at least can't be verified as such).
Just by way of comparison, here's the Orange mobile top-up page. The padlock is shown as secure.
https://www.youraccount.orange.co.uk/topup/pub/topup
-
I have also tried with FF and checked what it says about the site security. There is something on that page that is not encrypted, maybe an image or something. What ever it is not fully secure even though it is https.
-
Thanks very much guys,
I have been told by someone on the O2 and also over at the C/A forums that if it has https in the address it is secure,but I'm still not convinced,see screen shots below which were taken when I was on the page where you are suppose to put in your credit card details.
(http://i246.photobucket.com/albums/gg87/UncleUB/goldenpadlock.jpg)
(http://i246.photobucket.com/albums/gg87/UncleUB/O2Security.jpg)
(http://i246.photobucket.com/albums/gg87/UncleUB/O2Securitycertificate.jpg)
-
I got a bit more information on mine.
[attachment deleted by admin]
-
Thanks Colin,
I just tried via Opera and got the same message as you.
-
Do you think it might be worth sending a screen shot to O2?
-
Do you think it might be worth sending a screen shot to O2?
I have done so Colin,but as the email section of O2 seems to always replied by an Indian then I won't hold my breath.
The last reply I received was to contact my isp :-X (who is O2)What its got to do with your isp heaven knows
-
I think this is a rather serious issue. We are repeatedly told only to trust sites which show the padlock in the corner, and the O2 shop doesn't do so, and fails security checks, yet O2 claim that it's secure. I don't know if there's any central point for reporting this kind of thing to the banks, but I think they should be interested.
-
Were I going to buy something from O2 I would certainly inform the certificate issuer as the opera dialogue suggests. I feel a bit apprehensive about doing that as I don't want to buy anything from them. As Roseway says it is quite serious and a rather sloppy couldn't careless replay to your email UncleUB.
-
I have just had a lengthy discussions on the telephone with O2,firstly with BB tech support who kept telling me the site is secure and submitting my personal details is safe :no:
But after being passed to various departments no one has been able to answer my queries fully,one person said it will be my anti virus software. :-X
I am still awaiting a reply to my email (the one where I sent various screenshots).
Not sure what else to do,apart from staying clear buying anything via the site.
-
I have also tried with FF and checked what it says about the site security. There is something on that page that is not encrypted, maybe an image or something. What ever it is not fully secure even though it is https.
I think you might be correct looking at Steel's post over at the C/A forums.
http://forums.computeractive.co.uk/showthread.php?p=1239986#post1239986
(Scroll down to see the post)
Edit.....just had this reply from O2
I'm sorry due to security reasons I'm unable to view the attachment
given in your email. Please be assured that our website is fully secured
and your personal details are not shared by any one.
If you're receiving security warning messages, you'll need to make
changes on your browser settings. For this, you'll need to contact your
browser service provider.
You can also try clearing the cache memory for your Internet browser. If
you're using Microsoft Internet Explorer, from the main screen you can
click 'Tools', 'Internet Options', 'Delete Files' or 'Cookies' and then
follow the onscreen instructions to clear these files. You can also try
to use our website from a different computer or search engines like
Mozilla Firefox or Internet Explorer.
I hope this clears things up. If there's anything else I can do, reply
to my email.
Thanks
Deepali
O2 Customer Service
:wall: Needless to say I don't think I can get any further,will never buy from a website under those circumstances.
-
Yes it sounds about right. However it's still not good practice using non encrypted content on a secure page. You don't need many pixels in an image to run a script. I don't think you have much of a chance to get the situation changed without making a song and dance.
-
I think you're right to be suspicious. It suggests that the web page in question hasn't been properly set up, so although it's an https address it may still not be secure.
There is a long thread on the O2 forum concerning their web site errors following the introduction of the new BB packages. There were also errors on the O2 forum site which were corrected and there is still a time error on that site which shows posts being made +/-1 hour of the true time.
Basically, it appears that the developers are outsourced and probably located in India. Numerous errors were discussed and it took quite a while to correct those errors that had been identified.
This security error has obviously been missed.
@UncleUB >> I would suggest a PM to Paul@O2 or Abhishek@O2 will get the correct response.
-
@UncleUB >> I would suggest a PM to Paul@O2 or Abhishek@O2 will get the correct response.
Thanks Oranged, :)
Have sent Paul a pm.
-
I can't understand all the fuss, unkyUb........you used to get your phones from Tesco....... :D without any bother... :-X
-
I can't understand all the fuss, unkyUb........you used to get your phones from Tesco....... :D without any bother... :-X
:swoon:
At least the new was delivered to my front door today instead of being left up my back passage. :lol:
-
@UncleUB >> I would suggest a PM to Paul@O2 or Abhishek@O2 will get the correct response.
Thanks Oranged, :)
Have sent Paul a pm.
Didn't get a reply though........... >:(
-
I found this thread while having a look round the O2 forums,as you can see this was brought to light way back in Feb2009.
http://forum.o2.co.uk/viewtopic.php?t=14916