| Yubico Forum https://forum.yubico.com/ |
|
| Why isn't this forum using HTTPS? https://forum.yubico.com/viewtopic.php?f=4&t=2133 |
Page 1 of 1 |
| Author: | tequir00t [ Mon Dec 21, 2015 4:19 pm ] |
| Post subject: | Why isn't this forum using HTTPS? |
I was surprised to find out that Yubico's forum is still on HTTP. Considering the security knowledge of the community, it's really frustrating that Yubico is sending the login information in cleartext. Is there someone working on this? P.S. Sorry for the rant, the Yubikeys are amazing! |
|
| Author: | alanrew [ Thu Dec 31, 2015 7:39 pm ] |
| Post subject: | Re: Why isn't this forum using HTTPS? |
Totally agree. Nowadays, free https certificates can be obtained from https://letsencrypt.org/about/ It would be really good if a security-related forum had an https address! |
|
| Author: | Aditza [ Sat Jan 09, 2016 5:35 pm ] |
| Post subject: | Re: Why isn't this forum using HTTPS? |
was thinking the same thing... why is the forum not working over HTTPS as all the rest of the Yubico web services? not even the user control panel uses https .. even the registration, login and user account settings uses plain http.. as such, the user email address...password.. otp auth string are sent via plain text instead of https and revealed in transit. |
|
| Page 1 of 1 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|