In recent years there have been a lot of issues regarding security with the unencrypted HTTProtocol.

It is much saver and better for everyone to switch to the SSL encrypted communication denoted by the https:// prefix.

Last year the browser manufactures like Mozilla (Firefox) and Google (Chrome) decided to force the issue and display http:// as untrusted.

Unfortunately Ken has not yet opted to provide the secure connection yet. That's why it's getting flagged by the browsers.

https://motherboard.vice.com/en_us/article/xygdxq/google-will-soon-shame-all-websites-that-are-unencrypted-chrome-https

Quoting DJ Doena:

Quote:
However, what do you mean by password capture?

I didn't realize it was not clear. The FireFox message says that using an unsecure connection exposes any data that is entered on the web page to a third party that might have intercepted the transmission. Anything "in the clear," such as user IDs and passwords can be captured for illegal use. Not sure why you put me to the task of explaining it, since I'm quite certain you know all that. 

(unless of course the browser encrypts the data before transmission - maybe that's why you are asking?)

The reason I asked a "dumb" question was that perhaps there was some nuance that I did not know about. Something like the false positive you can often get from antivirus programs. I was hoping it was something like that - and somebody would say "not to worry," and also explain it to me.

(Oh by the way, thanks for taking the time to respond ...    - your linked article explains the situation well)

Oh I see. Well thanks again for the article. I didn't realize that there were so many web sites without this protection. Geez, even my own little web site has it. I can't imagine why any company with a large user base such as Invelos would not have this. Do you? Is there a cost issue? Maintenance? Or just plain laziness?

Quoting DJ Doena:

Quote:
Small websites have to pay a few more bucks for SSL on their domains. But since Invelos is probably running on a dedicated server, it should be part of the package.

However, it used to be a bit pricey to have an SSL certificate from a CA (certificate authority).

But now there is Let's Encrypt

Good Info.
Man, is there anything you don't know about I/T?   

Let's hope Ken is watching and takes advantage ...