Verizon Email Passwords Can Be Seen in Clear Text???

SOLVED
Reply
Highlighted
Contributor
Contributor
Posts: 2
Registered: ‎12-10-2009

Verizon Email Passwords Can Be Seen in Clear Text???

Message 1 of 8
(16,795 Views)

Is there a way for me to access my Verizon email via an HTTPS (Secure Socket Layer) connection?  I was shocked to learn that my password was being passed in clear text when I logged in.  I verified this by recording my headers using a Firefox plugin.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Gold Contributor VII Gold Contributor VII
Gold Contributor VII
Posts: 2,153
Registered: ‎11-10-2009

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 4 of 8
(16,664 Views)

@antscarpa wrote:

Is there a way for me to access my Verizon email via an HTTPS (Secure Socket Layer) connection?  I was shocked to learn that my password was being passed in clear text when I logged in.  I verified this by recording my headers using a Firefox plugin.


 

Odd, my sign in uses port 443 OK

 

Main Verizon site https://www22.verizon.com/

 

From the top bar select My Verizon then Verizon Central and Email and it sends you to

https://sso.verizon.net/ssowebapp/VOLPortalLogin

 

Some of their pages allow you to enter userid and password via http, try changing the address to https and refresh before entering sign on details.

View solution in original post

7 REPLIES 7
Highlighted
Platinum Contributor II Platinum Contributor II
Platinum Contributor II
Posts: 3,149
Registered: ‎09-15-2009

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 2 of 8
(16,754 Views)

Have you tried logging in through the My Account page? Go to verizon.net and click on the My Account button.

Not sure if this is exactly what you're looking for, but it's supposedly a "secure" page.

--
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.

"All knowledge is worth having."
Highlighted
Silver Contributor III
Silver Contributor III
Posts: 398
Registered: ‎10-09-2008

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 3 of 8
(16,681 Views)

the 'clear text' stuff is normal . . . . for most isp's

cjacobs001
Highlighted
Gold Contributor VII Gold Contributor VII
Gold Contributor VII
Posts: 2,153
Registered: ‎11-10-2009

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 4 of 8
(16,665 Views)

@antscarpa wrote:

Is there a way for me to access my Verizon email via an HTTPS (Secure Socket Layer) connection?  I was shocked to learn that my password was being passed in clear text when I logged in.  I verified this by recording my headers using a Firefox plugin.


 

Odd, my sign in uses port 443 OK

 

Main Verizon site https://www22.verizon.com/

 

From the top bar select My Verizon then Verizon Central and Email and it sends you to

https://sso.verizon.net/ssowebapp/VOLPortalLogin

 

Some of their pages allow you to enter userid and password via http, try changing the address to https and refresh before entering sign on details.

View solution in original post

Highlighted
Gold Contributor VII Gold Contributor VII
Gold Contributor VII
Posts: 2,153
Registered: ‎11-10-2009

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 5 of 8
(16,663 Views)

@cjacobs001 wrote:

the 'clear text' stuff is normal . . . . for most isp's


 

Pretty sad if that was true.  Pays to check the url before entering any signon info.  If it does not start with https I wouldn't touch it.

Highlighted
Silver Contributor III
Silver Contributor III
Posts: 398
Registered: ‎10-09-2008

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 6 of 8
(16,528 Views)

most don't, so far

cjacobs001
Highlighted
Contributor
Contributor
Posts: 2
Registered: ‎12-10-2009

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 7 of 8
(16,368 Views)

Thanks to those of you who responded.  So this my be repeating what you all have already stated, but essentially:

 

If you access:

http://webmail.verizon.net  it is not secure and your password is visible in clear text.  (Verizon should at least provide a link to an SSL login and clearly state that you are vulnerable on this page.)

 

However, if you access:

https://www.verizon.net/ssowebapp/VOLPortalLogin?TARGET=https://www.verizon.net/ssowebapp/protected/...  then you can login securely.

 

I can also login through my verizon central page but that actually uses a different ID/PW combination.  I didn't want to manage my entire account but only check my email via the web.

 

Thanks again.

Highlighted
Trivia Champ
Trivia Champ
Posts: 6,014
Registered: ‎09-24-2008

Re: Verizon Email Passwords Can Be Seen in Clear Text???

Message 8 of 8
(16,291 Views)

 


@antscarpa wrote:

Thanks to those of you who responded.  So this my be repeating what you all have already stated, but essentially:

 

If you access:

http://webmail.verizon.net  it is not secure and your password is visible in clear text.  (Verizon should at least provide a link to an SSL login and clearly state that you are vulnerable on this page.)

 

However, if you access:

https://www.verizon.net/ssowebapp/VOLPortalLogin?TARGET=https://www.verizon.net/ssowebapp/protected/...  then you can login securely.

 

I can also login through my verizon central page but that actually uses a different ID/PW combination.  I didn't want to manage my entire account but only check my email via the web.

 

Thanks again.


 

 

Rolls eyes.

 

News flash, the page still send the data unsecurly!

 

Here is a screen shot from Firefix with the add-on SSL Password Warning.

 

http://i45.tinypic.com/2yya33m.jpg

 

Bad move Verizon. Do it right or do not do it at all!

If you are the original poster (OP) and your issue is solved, please remember to click the "Solution?" button so that others can more easily find it. If anyone has been helpful to you, please show your appreciation by clicking the "Kudos" button.


 

How-To Videos
 
The following videos were produced by users like you!
   
Videos are subject to the Verizon Fios Community Terms of Service and User Guidelines and contains content that is not created by Verizon.
Covid19


Browse Categories
Categories:
Posts

Verizon Troubleshooters
Unable to find your answer here? Try searching Verizon Troubleshooters for more options.