PDA

View Full Version : Https login



Jaffakex
01-06-2016, 07:33 AM
I think we all would appreciate a https login website via chrome.
Right now all info in my browser is not encrypted and passwords can be easily sniffed. Especially if you play on mobile on a non secured wifi network.

Schnitzel
01-06-2016, 07:05 PM
I agree to this.
Moving the site to HTTPS shouldn't be too difficult, Google has a guide on how to do it.

For me, I don't even log onto forums from even a secured network (i.e. school) because there's always that chance that the wifi admin has access to certain programs for packet sniffing...

Jaffakex
01-07-2016, 01:56 PM
Basically signed certificate is the only cost. But at least in this way they would offer some kind of protection to their customers (players) since our mail and password are the only thing that secures our accounts and everything we have on them.

Jaffakex
01-09-2016, 04:30 PM
No. This doesnt help.
If you send something over http and not https, it is sent in plain text over the internet.
The communication from my browser to STS servers is not encrypted.
Whoever has a sniffing program over an unprotected network can easily get your password. It is like that easy and simple.
Everything you send over http is like sending a letter without envelope by regular mail.

epicrrr
01-10-2016, 02:49 AM
I think we all would appreciate a https login website via chrome.
Right now all info in my browser is not encrypted and passwords can be easily sniffed. Especially if you play on mobile on a non secured wifi network.

I believe all gmail log ins are https except AL via email, unless you use a common "1234" "love" type password you should'nt be worried. Packet sniffing/cracking/hacking are actually difficult unless you're being targeted by a person hacker not automated bot program.

Jaffakex
01-10-2016, 07:46 AM
Sorry if this wasnt clear enough.
The issue is not weak or strong password. But passwords being sent over http vs https.
I can have the strongest password ever and if used to login over http it's open to anyone who knows how to sniff internet traffic.