12/11/2017
Topic:
SSL Please
Mkoopajr
|
So I've been playing the game for a little bit now and would love to support it. Can we get some SSL encryption on this site though? It's free with Lets Encrypt, just google it. Setup and everything is super simple. |
12/11/2017
Topic:
SSL Please
Mkoopajr
|
It's a little bit of all the above. Using paypal helps with the payment thing, not reusing passwords for different things helps with the login issue, but that information is still transferred over the wire. I haven't looked into the information stored in your cookies or how you handle those, but if someone were to intercept the information gleaned could still open attack vectors on their other accounts, or (god forbid) they are reusing their password. For something that is now free and relatively easy to setup I can't justify any reason why it wouldn't be used anytime there is a login functionality on a website. It also opens up your server to attack vectors, intercepting the data over the wire if it's not encrypted they could change the information. |