test content
What is the Arc Client?
Install Arc

Shouldn't the forum be using HTTPS/SSL?

SystemSystem Member, NoReporting Posts: 178,019 Arc User
Shouldn't the forums, which we log into using our game login information, be using HTTPS/SSL?

Or is there a way to obfuscate our login info that I missed?
Post edited by Unknown User on

Comments

  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    AhmNee wrote:
    Shouldn't the forums, which we log into using our game login information, be using HTTPS/SSL?

    Or is there a way to obfuscate our login info that I missed?

    It does. Dont worry, all your info is sent to cryptics secure server.
  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    Check the action on the login forms.
  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    Ah. Good to know. I just thought it was a little strange.

    Thanks for setting me straight.
  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    Although that is still vulnerable to the well-known form interception attack, so it's not exactly robust. Still, I suppose it's better than nothing. At least it stops passive traffic inspection from being able to pick up passwords.
  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    Miiru wrote:
    Although that is still vulnerable to the well-known form interception attack, so it's not exactly robust. Still, I suppose it's better than nothing. At least it stops passive traffic inspection from being able to pick up passwords.

    IMO, if you've got someone sniffing your traffic/tapping your line/man in the middle/whatever, you've got bigger problems than someone stealing your STO account info...
  • Archived PostArchived Post Member Posts: 2,264,498 Arc User
    edited March 2010
    Legatus wrote:
    IMO, if you've got someone sniffing your traffic/tapping your line/man in the middle/whatever, you've got bigger problems than someone stealing your STO account info...

    Yes, you're on the Internet. That is often thought to be a problem.

    There are a ridiculously large number of ways for anybody to do that sort of thing. Sound security protocols are the only real defence. In practice, nobody cares about your forum/game/blog/drool/whatever account enough to expend the effort needed. If you aren't stealing credit card numbers with an attack, it's not worth the time to set up.
Sign In or Register to comment.