No HTTPS support, even for login? - SIG Talk
SIG Talk Gun Forum

No HTTPS support, even for login?

This is a discussion on No HTTPS support, even for login? within the Site Help and Support forums, part of the SIG Talk category; I usually read the site through an app so never really noticed that https isn't supported here, even for the login portion. The latest desktop ...


Go Back   SIG Talk > SIG Talk > Site Help and Support

Site Help and Support Notice an issue with your account or the site? Post here for help.

Like Tree8Likes
  • 1 Post By guncurious
  • 2 Post By Malicious Compliance
  • 1 Post By guncurious
  • 2 Post By bearone2
  • 1 Post By guncurious
  • 1 Post By admin
Reply
 
LinkBack Thread Tools Display Modes
Old 03-28-2017, 12:12 PM   #1
Senior Member
 
Join Date: Oct 2014
Posts: 204
Likes Received 57
No HTTPS support, even for login?

I usually read the site through an app so never really noticed that https isn't supported here, even for the login portion. The latest desktop version of Firefox let me know that my login wasn't secure. Sure enough I was able to see my login/password in clear text with a network sniffer. I also tried getting to the site with https:// and that didn't work either.

Are there any plans to offer some sort of login security?
bearone2 likes this.
guncurious is offline  
Register

Welcome to the SIG Talk Forum dedicated to SIG Sauer Pistols and SIG Sauer Rifles.

We welcome everyone and the community is free to join so register today and become part of the SIG Talk Forum!

Old 03-28-2017, 01:00 PM   #2
Supporting Member
Supporting Member
 
Join Date: Jan 2013
Location: :
Posts: 18,375
Likes Received 12974
Has been discussed, you'll find some answers HERE. Hope that helps.
bearone2 and WERA689 like this.
Malicious Compliance is offline  
Old 03-28-2017, 01:07 PM   #3
Senior Member
 
Join Date: Oct 2014
Posts: 204
Likes Received 57
Quote:
Originally Posted by Malicious Compliance View Post
Has been discussed, you'll find some answers HERE. Hope that helps.
Thank you. I searched first but missed that post I guess.

I just read that thread and, frankly, was flabbergasted when one of the admins said "In any case, it's not really a concern for sites like this, where no e-commerce is transacted. No credit card info is stored here at all. "

I feel like the site admins need to maybe take a lesson in internet security if they think this isn't a concern..
bearone2 likes this.
guncurious is offline  
 
Old 03-28-2017, 01:50 PM   #4
Senior Member
 
bearone2's Avatar
 
Join Date: Jun 2012
Location: Arizona
Posts: 54,115
Likes Received 63083
why, no financial or account info asked for....i don't have a problem with a non https site like this.
WERA689 and DarrylHadfield like this.
bearone2 is offline  
Old 03-28-2017, 03:37 PM   #5
Administrator
Supporting Member
 
WERA689's Avatar
 
Join Date: Nov 2013
Location: Metro Atlanta, GA
Posts: 501
Likes Received 255
Quote:
Originally Posted by guncurious View Post
Thank you. I searched first but missed that post I guess.

I just read that thread and, frankly, was flabbergasted when one of the admins said "In any case, it's not really a concern for sites like this, where no e-commerce is transacted. No credit card info is stored here at all. "

I feel like the site admins need to maybe take a lesson in internet security if they think this isn't a concern..
That was me. Unless you use the same password for every site you visit, what's the risk on *this* site? IMHO, if you use "Fido" here AND for your bank, you'd have more to learn about internet security than I do. (Don't take that wrong)
WERA689 is offline  
Old 03-28-2017, 03:47 PM   #6
Senior Member
 
Join Date: Oct 2014
Posts: 204
Likes Received 57
Quote:
Originally Posted by WERA689 View Post
That was me. Unless you use the same password for every site you visit, what's the risk on *this* site? IMHO, if you use "Fido" here AND for your bank, you'd have more to learn about internet security than I do. (Don't take that wrong)
Anyone can pick your clear text user name and password off the network and log in as you. Boom, instant access to all PMs, can edit your posts, any private info you have in your profile (email address,.etc). If you have elevated privileges (a mod) then that person now has them. Not having secure login for anythinf in 2017 is just bad bad bad poor judgement.


Sent from my SM-G930V using Tapatalk
chinch likes this.
guncurious is offline  
Old 03-28-2017, 04:23 PM   #7
Administrator
Supporting Member
 
WERA689's Avatar
 
Join Date: Nov 2013
Location: Metro Atlanta, GA
Posts: 501
Likes Received 255
That's why it's going to roll out shortly.
WERA689 is offline  
Old 03-29-2017, 06:08 AM   #8
Administrator
Supporting Member
 
admin's Avatar
 
Join Date: Dec 2011
Posts: 676
Likes Received 360
There are also secondary layers of security for all the important moderator/admin functions.

Kevin
WERA689 likes this.
admin is offline  
Reply

  SIG Talk > SIG Talk > Site Help and Support

Thread Tools
Display Modes


Similar SIG Talk Discussions
Thread Thread Starter Forum Replies Last Post
P226 Support Plate abass931 SIG Sauer Pistols 3 07-21-2016 01:40 PM


Top Gun Sites Top Sites List

Powered by vBulletin 3.8.8
Copyright ©2000 - 2020, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.6.1
Copyright © 2010 - 2020 SIG Talk. All rights reserved.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.SIG Talk is a SIG Sauer Firearms enthusiast's forum, but it is in no way affiliated with, nor does it represent SIG Sauer, Inc. of Exeter, NH.