Why is Pistonheads not secure? -no HTTPS plain text password

Why is Pistonheads not secure? -no HTTPS plain text password

Author
Discussion

porridge

Original Poster:

1,109 posts

145 months

Thursday 27th March 2014
quotequote all
Surprised I have not noticed before, but any reason why Pistonheads have elected not to enable basic security i.e. HTTPS, especially on login page?

Have checked and login details and password are all sent as plain text.

MattDell

3,242 posts

156 months

Thursday 27th March 2014
quotequote all
Good question.

We will be doing some work around this in the coming months. smile

Pixelpeep

8,600 posts

143 months

Thursday 27th March 2014
quotequote all
porridge said:
Surprised I have not noticed before, but any reason why Pistonheads have elected not to enable basic security i.e. HTTPS, especially on login page?

Have checked and login details and password are all sent as plain text.
Are you building up to a night of drunken keyboard abuse against fellow PHers with a view to blaming it on 'someone must have hacked my account because of the plain text passwords...' ?

wink

Seriously though - as long as you don't use the same password for anything sensitive who really cares?

porridge

Original Poster:

1,109 posts

145 months

Thursday 27th March 2014
quotequote all
MattDell said:
Good question.

We will be doing some work around this in the coming months. smile
thumbup Thanks