Open Side Menu Go to the Top
Register
Forum Leaks Passwords (X-Post) Forum Leaks Passwords (X-Post)

07-23-2017 , 03:01 PM
Cross-posting thinking that technical folk may be able to help plug the leak.

It looks to me as though the forum transmits username / passwords in plaintext.

http://forumserver.twoplustwo.com/55.../#post52589333
Forum Leaks Passwords (X-Post) Quote
07-23-2017 , 08:15 PM
Quote:
Originally Posted by AllCowsEatGrass
Your web browser is just warning you that the login page is not using SSL/TLS encryption, meaning when you click 'login', your data is sent in plain text over the wire.

If someone were conducting a man in the middle attack against you while you were logging in, they'd be able to get your username and password. Likewise, your ISP could easily get your username and password if they wanted to.

Web browsers have started displaying these warnings, which I think is a really good thing. Hopefully it will force sites that haven't even implemented SSL/TLS on login pages to start to implement encryption.

Yo twoplustwo, EFF's let's encrypt is free. Free certs backed by the Electronic Frontier Foundation. Dead simple to setup.
https://letsencrypt.org/
.
Forum Leaks Passwords (X-Post) Quote

      
m