Use HTTPS

Alright. I know https://www.cubiccastles.com/ uses HTTPS.
However, you enter your log in on the forums2 site.
This does not use HTTPS. This means that information could be stolen by attackers.
Copy & pasted from THIS LINK:
Info Icon (Info or Not Secure)
The site isn't using a private connection. Someone might be able to see or change the information you send or get through this site.

You might see a "Login not secure" or "Payment not secure" message. We suggest that you don't enter sensitive details, like passwords or credit cards.

Warning Red Triangle (Not Secure or Dangerous):
We suggest you don't enter any private or personal information on this page. If possible, don't use the site.

Not secure: Proceed with caution. Something is severely wrong with the privacy of this site’s connection. Someone might be able to see the information you send or get through this site.

You might see a "Login not secure" or "Payment not secure" message.

Dangerous: Avoid this site. If you see a full-page red warning screen, the site has been flagged as unsafe by Safe Browsing. Using the site will likely put your private information at risk.



This site has the info icon Not Secure message. "Why did I put in the 'Dangerous' segment?"
I did this as this site is technically this. Safe browsing usually only gives the full-page red warning screen if the site is "Detected as phishing or illegal", that sort of stuff.

Do we really want our cubic castle accounts stolen? What if we use the same password for cubic castles as other sites? Some do. That could mean gmail hacked (all google accounts if that happens) and more! We need HTTPS!!!

Comments

  • got to say thats the WORST fake info i ever seen... gosh im even too tired of reading stuff on this froums to explain more things... but in basic terms what i want to explain "how does fake redirection's work" "how does replacing info sent to a website and resending to other direction works" etc etc just god... before you go on google's support webiste please contact real wiki for example, this is like 9 % true. (btw safe browsing is in google chrome i use opera so how i know if the site is dangerous pls explain mkay? yes i want info yes NO just kiddin' dont explain it to me or i will quit using forums, hey what if i use microsoft edge?!)
  • got to say thats the WORST fake info i ever seen... gosh im even too tired of reading stuff on this froums to explain more things... but in basic terms what i want to explain "how does fake redirection's work" "how does replacing info sent to a website and resending to other direction works" etc etc just god... before you go on google's support webiste please contact real wiki for example, this is like 9 % true. (btw safe browsing is in google chrome i use opera so how i know if the site is dangerous pls explain mkay? yes i want info yes NO just kiddin' dont explain it to me or i will quit using forums, hey what if i use microsoft edge?!)

    I do not understand..
    Are you talking about info being able to be stolen without HTTPS?
    'cause that's true..
  • The op here is incorrect. Forums2 does not use https, but when you login, it directs to our single-sign-on that does use https.
  • CosmicCow said:

    The op here is incorrect. Forums2 does not use https, but when you login, it directs to our single-sign-on that does use https.

    Oh. I did not notice...
    also is that an automated response anyone? i seriously have no idea.


    -THREAD NEEDS CLOSING DUE TO THIS RESPONSE-
  • No it wasn't automated- I am a real person... Anyway, closing thread.
  • SirKewberthSirKewberth EdenForum Administrator, Forum Moderator, Game Developer
    CosmicCow said:

    No it wasn't automated- I am a real person... Anyway, closing thread.

    Our CosmicCow forum AI bot is programmed to respond like this so as to appear human.
  • U2h1dCB1cCBLZXdiZXJ0aCE=
This discussion has been closed.