ATS Secure Login Question

This question is for mainly the ATS owners, developers or even Mods if they have the answer.

Is the ATS login secure? I don't see any secure login indicator in FF and assume (yeah I know) that means I'm sending a user/password in clear text. Is that correct or am I missing something?

If correct then why no secure login?

U2U is also fine for an answer if anyone doesn't wish to post it (for the robots.)

Thanks.

reply to post by Bassago


Anyone?

*bump*

I'd say in the clear.

reply to post by roadgravel


Yeah, I'm not a big fan of that method of password login.

Seems like an accident waiting to happen. Or a hack.

reply to post by Bassago

Bassago
reply to post by Bassago

 

Anyone?

*bump*

I've also been monitoring this thread hoping one of the staff (or even Bueller himself) would post a reply as to future plans - if any.

I can tell you definitively that current login process and all browsing/posting on the site is *not* secure.

Based on the nature of the site, I'm not sure that it needs to be although there are some areas (uploads, pics, etc) where I can see members wanting more than a modicum of privacy & security.

At the very least, please make sure your PW here does *not* match any other PW's you have where security is important.

reply to post by Riffrafter


My concern is someone intercepting the password and hijacking profiles.

I've sent a U2U to the staff asking for a response. Hopefully soon.

Bassago
reply to post by Riffrafter

 

My concern is someone intercepting the password and hijacking profiles.

I've sent a U2U to the staff asking for a response. Hopefully soon.

Very true - I thought of that too.

But from a damage perspective, the only thing ruined is your virtual persona and reputation.

That certainly counts for a lot here - as it is the currency of the realm. But from a legal/monetary perspective - not so much.

Just rambling...pay me no heed. I am interested in any response you get, so please let me know if you get one if you don't mind (U2U is fine).

Good luck.

Most sites hash passwords in the database, not encrypt.

reply to post by Riffrafter


Will let you know, still hoping for a response.

I'm sure we'll get one.

reply to post by Bassago


Not sure if you missed my post above, but if you use the built-in tool in Firefox as I describe above, you should be able to answer your question.

Be patient as it may take some time for an owner to respond.

reply to post by _BoneZ_


Thanks for the response BoneZ. I'll check out what you've said.

Maybe secure login isn't common, IDK. I know I'd feel better if it was at least on the login page. Maybe I'm worrying about nothing.

ETA - Yeah, I missed it somehow?? Then saw it. Thanks again.

Bassago
Is the ATS login secure? I don't see any secure login indicator in FF and assume (yeah I know) that means I'm sending a user/password in clear text. Is that correct or am I missing something?

In the clear.

Generally speaking, it's assumed that user passwords for recreational sites (of which ATS is classified) should not be the same as people use on more secure sites/email, and standards have been somewhat lower for quite some time.

Additionally, since there is no known HTTPS protocol that is completely secure, the effort seems futile for a site like ATS.

However: that being said, we have taken steps to obfuscate aspects of the log-in that make it very hard for packet-snifers to notice what is happening -- which is the first step for in-transit passwords to be noticed. Some of that same unique method is also used instead of typical garbled-text captchas to ensure we have a human user and not a bot/spider. I won't elaborate further.

reply to post by SkepticOverlord


Thanks SO. Much appreciated.

That's all I was wondering. I feel a bit better for that answer.

reply to post by Bassago


My concern is the guvament!! I'm half-joking, half-serious.

Asked and answered.


closed