Because of course it isn’t.
I was going to post in the new forum thread, but this looks like the right topic - @Brigby, is there any chance the forum site can use https rather than http so everybody’s forum passwords don’t have to fly across the Internet in plain-text?
What a wonderful opportunity to update one’s passwords!
Yikes!
Thanks for pointing it out, didn’t even pay attention to that.
Changed my password for sure, to some random 16 character one I got from a generator site.
Outlook says your password reset email “failed our fraud detection checks”. How apropos.
How do I change my password? I can’t find the option…
[edit] oh I’ve got it, you don’t go into your profile, it’s the cog at the far right of the whateveritis bar with your name on it.
@shteev The site works with HTTPS you just need to put it in the URL explicitly and accept their old cert. Their brilliant site admins apparently overlooked this small detail. 505 Go! Official Forums
tried the link and got:
This server could not prove that it is forums.505go.com; its security certificate is from *.vanillacommunities.com. This may be caused by a misconfiguration or an attacker intercepting your connection.
@shteev Seriously, the square box with what looks like mountains is the insert image button. It will ask for the Url and will then embed the image in your post.
That’s telling you they messed up the cert. It’ll still be HTTPS they just need to get the names right by buying a new cert. I.e. their team is a bunch of idiots. Accept the cert and your password will not go out in cleartext.
Assuming there’s no man-in-the-middle attack which is the whole point of the certificates in the first place. (Which, honestly, is a highly remote possibility… so yes, probably the best option until they fix the website.)