If you just type www.esa.co.za it will be on the insecure protocol HTTP. Make sure you enter the URL as HTTPS:// www.esa.co.za (had to add a space in between so it posted correctly - obviously without the space when you type it in address bar). It is actually good policy to open all sites using HTTPS, even trusted ones.

It would be better if ESA did an auto-redirect from HTTP to HTTPS, given the sensitive nature of what we do/say here, as well as the times we live in with data breaches etc.

This site is not secure at all. I notified the webmaster 6 months ago and nothing was done.

Use this site with the assumption that all communication is open to the public.

I have also been getting the message on my ipad, but not on my phone, and I am asked to log on much more regularly. Can ESA admin please investigate Chameleon's suggestion and comment for all customers' peace of mind?

Got it too.

Hi Guys

We are in the final stages of wrapping up our migration to https. We are still testing everything as we now have "mixed content". That means some elements are routed via HTTP, and some elements are routed via HTTPS, resulting in the "mixed content" message. Certain parts of our sites need to be recoded.

I have installed our new upgraded test site at www2.esa.co.za. When you click on "Login", it should automatically redirect you to an https instead of an http connection.

We're running more tests over the weekend. Once everything is working correctly, we'll install everything on our main URL, www.esa.co.za.

Please let me know if you see any error messages when you browse to www2.esa.co.za.


Thank you

James

Ouch, yeah "mixed content" is a bitch sometimes. Good luck :)