"Not secure" in Forum url

jonny2510 · 17 December 2017 at 9:13PM

Just a bump to say this still isn't fixed (but really should be). This is an extremely poor way for such a popular site to process logins, especially in 2017.

gromituk · 18 April 2018 at 2:48PM

And a bump to say this still hasn't been fixed four and a half months into 2018! :eek: Just what is going on, MSE?

And there's worse. The password reset procedure emails you a new password in plain text that is neither single-use nor has an expiry date!

It is more than a year since MSE officially acknowledged this security flaw (in a mealy-mouthed way, implying that it's Google's fault).

Plus · 19 April 2018 at 5:48AM

Thanks MSE for finally implementing HTTPS after all these years people have been pointing out this massive weakness, inexcusable for a site covered in people's financial details. I can now use MSE without concern about my login password or cookies being stolen.

evenasus · 6 April 2019 at 10:56PM

I'm still getting the i in a circle sign and 'Your connection to this site is not fully secure' when I go to any of the forums.

"Not secure" in Forum url

Comments

Categories

Get our FREE Weekly email full of deals & guides - and it’s spam-free