Non-HTTPS password requests are now flagged by Firefox in an effort to beef up security and lower corporate risk. Firefox DevEdition 46 will alert developers whether passwords are requested on nonsecure pages, displayed as a lock with a red strikethrough. The only way to avoid getting flagged is by hosting login pages on HTTPS or migrating an entire website to the secure server. Businesses have two choices: Get on board with the move, or face the backlash as users seek secure alternatives.”]
Source: https://securityintelligence.com/news/fair-warning-http-password-requests-flagged-by-firefox/