<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
<link rel="self" type="application/atom+xml" href="https://forum.yubico.com/feed.php?f=4&amp;t=2133" />

<title>Yubico Forum</title>
<subtitle>...visit our web-store at</subtitle>
<link href="https://forum.yubico.com/index.php" />
<updated>2016-01-09T17:35:18+01:00</updated>

<author><name><![CDATA[Yubico Forum]]></name></author>
<id>https://forum.yubico.com/feed.php?f=4&amp;t=2133</id>
<entry>
<author><name><![CDATA[Aditza]]></name></author>
<updated>2016-01-09T17:35:18+01:00</updated>
<published>2016-01-09T17:35:18+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8137#p8137</id>
<link href="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8137#p8137"/>
<title type="html"><![CDATA[Re: Why isn't this forum using HTTPS?]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8137#p8137"><![CDATA[
was thinking the same thing... <br />why is the forum not working over HTTPS as all the rest of the Yubico web services?<br /><br />not even the user control panel uses https .. even the registration, login and user account settings uses plain http.. as such, the user email address...password.. otp auth string are sent via plain text instead of https and revealed in transit.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=4130">Aditza</a> — Sat Jan 09, 2016 5:35 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[alanrew]]></name></author>
<updated>2015-12-31T19:39:42+01:00</updated>
<published>2015-12-31T19:39:42+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8102#p8102</id>
<link href="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8102#p8102"/>
<title type="html"><![CDATA[Re: Why isn't this forum using HTTPS?]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8102#p8102"><![CDATA[
Totally agree. Nowadays, free https certificates can be obtained from <br /><br /><!-- m --><a class="postlink" href="https://letsencrypt.org/about/">https://letsencrypt.org/about/</a><!-- m --><br /><br />It would be really good if a security-related forum had an https address!<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=4112">alanrew</a> — Thu Dec 31, 2015 7:39 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[tequir00t]]></name></author>
<updated>2015-12-21T16:19:03+01:00</updated>
<published>2015-12-21T16:19:03+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8089#p8089</id>
<link href="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8089#p8089"/>
<title type="html"><![CDATA[Why isn't this forum using HTTPS?]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=2133&amp;p=8089#p8089"><![CDATA[
I was surprised to find out that Yubico's forum is still on HTTP. Considering the security knowledge of the community, it's really frustrating that Yubico is sending the login information in cleartext. Is there someone working on this?<br /><br />P.S. Sorry for the rant, the Yubikeys are amazing!<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=4094">tequir00t</a> — Mon Dec 21, 2015 4:19 pm</p><hr />
]]></content>
</entry>
</feed>