If you log out of your account, and sign back in, you’ll notice you’re no longer protected by a secure (https) connection! What? You though you checked a box saying use HTTPS Whenever possible. Like in this example where we want to connect to NetworkedBlogs.Ĥ. At least Facebook gives you a warning…if you want to visit the page, click Continue.ģ. If you browse to an app or page that is unsecure, you’ll see the following message. When you visit a page or app on Facebook that requires a regular (http) connection, it switches your entire account connection back to the unsecure (http).

Unfortunately there’s a flaw in the system. When you check the box Browse Facebook on a secure connection (https) whenever possible you think your always protected right? Not necessarily.Ģ.

So you set up secure Browsing (Https) in Facebook to help protect against bad guys running packet sniffing apps like Firesheep over a public Wi-Fi network. We’ll leave this online for the sake of historical archive and it should be treated accordingly.ġ.

Please note: This guide was initially published back in 2011 and Facebook has since resolved this issue and made all of use https, without the need for you to make any changes to your Facebook or browser settings.

Insecure browser connection