FlyerTalk Forums - View Single Post - Log-in security [and using SSL / https]
View Single Post
Old Jul 3, 2014 | 11:52 am
  #1  
techie
10 Countries Visited
20 Countries Visited
30 Countries Visited
10 Years on Site
 
Join Date: Mar 2013
Location: US of A
Programs: Delta Diamond, United 1K, BA Blue, Marriott Titanium, Hilton Gold, Amex Platinum
Posts: 1,786
Log-in security [and using SSL / https]

Hi all,

I find it to be a bit of a shocker that not only is the log-in process not done over HTTPS -- schoolboy error, if I ever saw one -- but you do a simple MD5 of the password and send it along as part of the log-in procedure in clear text. The username is also in clear text.

<deleted>

Could you please sort it out ASAP? This should really not be happening in this day and age.

Last edited by JDiver; Jul 3, 2014 at 8:45 pm Reason: deleted overly large graphic distorting page rendering
techie is offline