The Mud Connector

Author Topic: Invalid security on registration  (Read 1304 times)

SlySven

  • New to TMC
  • *
  • Posts: 3
    • View Profile
Invalid security on registration
« on: May 17, 2017, 4:41 PM »
Decided to sign up here as MudBytes is down currently - but found a worrying sign when I went to registration page - it was an http: not a https: scheme link.  I manually tried forcing the latter but my browser told me that the certificate was several years out of date - see the images.

I'm not a web-site expert but this does not sound/look good - does it...?

Ateraan

  • TMC Veteran
  • *****
  • Posts: 801
  • New Worlds Ateraan
    • View Profile
    • New Worlds Ateraan
Re: Invalid security on registration
« Reply #1 on: May 19, 2017, 4:22 PM »
Nothing surprising about that. Any website that isn't updated regularly runs into this issue. It's not really a big security risk just a warning for a site that you may not trust.
New Worlds Ateraan
www.ateraan.com

Tijer

  • TMC Veteran
  • *****
  • Posts: 814
    • View Profile
Re: Invalid security on registration
« Reply #2 on: May 19, 2017, 4:49 PM »
this site has been around for many many years.. so trustworthy :)
--Tijer

Pymeus

  • New to TMC
  • *
  • Posts: 41
    • View Profile
Re: Invalid security on registration
« Reply #3 on: May 19, 2017, 7:23 PM »
The vast majority of the web has always been http.  It's encouraging that we're to a point where browsers feel they can start openly shaming insecure logins and search engines can penalize non-https sites, but we're not quite to a point where small-time hobbyist forum sites must get on board en masse yet.

Mudbyte's cert is from some moving company on the same shared hosting.  (That might explain some of the spam mudbytes gets.)  Mudconnect's cert is self-signed for localhost.  Neither of these is particularly valid or trustworthy.
Adventures Unlimited (est. 1999)
connect: tharel.net 5005
 via flash: FMud
website: www.tharel.net
twitter: Tharel_AU