Forum log-in not secure

[jdev21]

I remember that a while ago, a lot was made of XYplorer installation executable not being signed and that was corrected. However, I wonder how many people know that this forum log-in is not done in a secure manner and their username and password are sent in clear text.

The main forum page is not loaded over HTTPS, so this submit action is not encrypted:

Code: Select all

<input type="submit" name="login" value="Login" class="button2" />

A network sniff has confirmed that credentials are sent in clear text as per...



I know it's just a forum and such and I am not asking for the whole site to be encrypted, but sending the username and password in the clear? Really?

Thanks for pointing this out. It is VERY concerning.

[admin]

I'm currently checking the costs of converting the whole domain to https via my provider.

[highend]

https://www.hosteurope.de/SSL-Zertifika ... ation-SSL/
?

[admin]

Zum Beispiel. Prüfe noch.

[admin]

Done.

The whole site is now SSL secured. You might want to update your bookmarks.

[JLoftus]

Done.

The whole site is now SSL secured. You might want to update your bookmarks.

Great! Thanks Don!

[PeterH]

For me this is a big (and necessary) improvement!

So: thanks a lot

[Marco]

And 256-bit keys!

[zer0]

It may have taken a couple of years, but I am glad that we got there in the end