Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Tab

(11,093 posts)
Tue Sep 4, 2012, 11:40 AM Sep 2012

Any thought of running the DU login through a https secure connection?


Logins seem plain http. Or are you encoding passwords before they go out? Because as it is, I don't see https on the login page, and anyone with Wireshark or some similar network sniffer could snag it.
1 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Any thought of running the DU login through a https secure connection? (Original Post) Tab Sep 2012 OP
I have no idea if the Admins are contemplating a more secure login... Make7 Sep 2012 #1

Make7

(8,543 posts)
1. I have no idea if the Admins are contemplating a more secure login...
Tue Sep 4, 2012, 01:05 PM
Sep 2012

... but I do know that currently usernames & passwords are transmitted without any encoding - which means it is entirely possible for someone to get your password if they are monitoring your internet connection.

It is highly recommended that everyone use a unique password for DU. Do not reuse the same password you use for other websites (e.g. your bank's website, paypal, etc.). If someone were to get your DU password (which is possible), they would then also have your password to any other account that uses that same password.

Latest Discussions»Help & Search»DU Community Help»Any thought of running th...