Poor O2 Website security. This site is not secure.

[Anonymous]

Hello, I am using IE 8 on Windows 7 RC1 and I am unable to use the O2 site properly. It seems that they show secure and insure items on the same page which is what is causing the issue.

If I browse the site in Opera I get the following error trying to view my account details.

Secure connection: fatal error (47)

https://registration.o2.co.uk/Registration/Update

Transmission failure.

Opera also reports this about the security of the O2 site when on a page that uses SSL.

"The connection to www.o2broadband.o2.co.uk is not secure. Do not use it to submit sensitive information.

The server attempted to apply security measures, but failed".

I am a web developer by trade and this is a little concerning as I am new to 02. If anyone from O2 wants to discuss this further please PM me.

It seems to show a lack of discipline as the lesser secure browser do not show these warnings.

Regards

Madmaxious

[perksie]

This is a customer forum and is rarely if ever visited by O2. They don't even run the forum.

I do fail to see why you think the main web-site should support Windows 7, before it becomes a retail operating system, and is not in a final release version. 😐

[Anonymous]

The point is more to do with the way they build the security of the page. Not all the page is run under HTTPS. Although we should all trust O2 that the login details are encrypted there is no easy way to verify this. It could just be an image that is served over HTTPS. That is why the whole page should be HTTPS.

I understand that Windows 7 is still not on final version. Although Opera 9.64 is a final version and this reports the error on XP as well.

As it stands I am unable to access my Account details page. I have to use another machine not running IE 8 or Opera.

As stated I am new to O2 and would like to raise the issue with them directly but have no idea how. As the forum is hosted on the O2.co.uk domain I hoped that someone from O2 might actually want to see what all their customers where discussing.

The underlying fact is that the HTTPS connections are not implemented correctly.

Thanks

Madmaxious

[Anonymous]

The security of the website was mentioned after the recent redesign. This thread may be of some use to you:

http://forum.o2.co.uk/viewtopic.php?t=14916

SV

[perksie]

Agree with you totally. I'm afraid they take little notice of what is said here, unless it's detrimental or defamatory, then it gets removed by the "Ghost Moderators". It seems almost impossible to open a dialogue with anyone other than CS.

Try here:

http://www.o2.com/about/our_locations.asp

[Anonymous]

Hello, I am using IE 8 on Windows 7 RC1 and I am unable to use the O2 site properly. It seems that they show secure and insure items on the same page which is what is causing the issue.
If I browse the site in Opera I get the following error trying to view my account details.
Secure connection: fatal error (47)

I agree madmax - I use Firefox and when topping-up I've noticed that on the page that asks you for credit card details, the little padlock in the bottom right-hand corner has a red exclamation mark across it. When I click the padlock, it informs me that 'not all the data on this page gets encrypted before being sent over the internet'. The https is apparent in the web address, but I am concerned that credit card details could be intercepted. It's of particular concern because O2's poor security is responsible for much c/c fraud and many innocent people are finding "O2 - Slough £30" appearing their credit card statements.

I wonder if it is better to top up using the 4444 number, rather than going online

[jonsie]

I wonder if it is better to top up using the 4444 number, rather than going online

I would never top up on line for these very reasons!