Forced to change password/ MSE

Enigmatic_Me

ben501 wrote: »

Wrong part of the forum. Have a look in feedback

https://forums.moneysavingexpert.com/discussion/5791325

Thanks, yes I read that too and no answers or explanations in there neither. :mad:

hdh74

Had to do the ruddy thing again this morning,. and what's really annoying is having been logged out I can't see where I was up to easily, driving me nuts now, come on,...

booklover500

I am getting p****d off with this now - having to change password again after just 5 days - what's going on?

Margot123

Has the site been hacked, I wonder?

Carrot007

Monkey_Chinchilla wrote: »

You can change it to the same password you already had if that helps.

Well this time I could, the previous time it refused my old one for being too short so I was forced to change it.

Jinhao159

Apparently this is being doe to ensure our passwords are secure. Not sure who they are secure from as the data is being sent in a plain format as the pages isn't secure.

However, we should be reassured as the site isn't any less secure, it is just that browsers now highlight it.

Good news, this has been insecure for years and therefore it doesn't matter.

This is the reply I received

"We’re looking at all areas including asking people to make sure their passwords are secure.

It is not possible to connect to the forums with a https connection at the moment. We hope to provide that in the coming months.

As you might be aware, over the past year many websites have started to offer https connections to improve security, and many browsers, including Firefox, have started to highlight websites that have not yet switched over.

Our forums are not any less secure than they have been in the past. It is your browser that is offering more information on your connections.

Regards,
MSE Forum Team"

dc64

People please don't fret so much. Have you seen the news tonight? I'm fine with the problem of changing my password regularly. Not exactly mega problem is it?

Jinhao159

Hello dc64. I am not fretting about changing my password, or having to change it on a regular basis.

I am fretting over having to send it over an insecure page. It is sent as plain text that is easy to intercept.

I use unique passwords for any sites where I may send payment data, such as ebay, Amazon etc. However, many people eith use the same password, or recycle them. This means that although this is bad practice, MSE are actually making them more vulnerable.

Jinhao159

So if we are concerned about security we should leave the site, not draw it to anybody's attention.

A lot of the complaints were about changing passwords. I just stated that I can live with the inconvenience of changing passwords, but was worried about the security risk.

If you had had your password stolen in the past you may also be a little more worried about it. I never discovered how it was stolen but it does make me careful about passwords and not wanting to send them unencrypted.

However, I am seriously considering leaving. This used to be a friendly and helpful forum, but now it seems we are not allowed to have opinions or explain why.:(

dc64

Joining any site is like playing Russian Roulette.