Like a phoenix rising from the ashes

[AndreFuture]

I'm a bit concerned by their security, though…

 

http://oi65.tinypic.com/24cb80n.jpg

[+ José Soplanucas]

I'm a bit concerned by their security, though…

 

http://oi65.tinypic.com/24cb80n.jpg

 

Right now they are just a non commercial start up. What we can see is just a draft of the website they will be. I am not using my real name in my dealings with them, nor I know their names.

[+ oldNbusted]

I'm a bit concerned by their security, though…

 

http://oi65.tinypic.com/24cb80n.jpg

 

 

They need to fix that, there really isn't a good excuse in 2017 and if they don't know that, they likely don't know a bunch of other things.

[+ José Soplanucas]

Why do they need a stronger security right now, when everything is for free and they are not taking personal information or CC?

[Kevin Slater]

Why do they need a stronger security right now, when everything is for free and they are not taking personal information or CC?

 

Because while they're building their base and brand, this is the kind of concern they'd want to avoid.

 

Kevin Slater

[+ José Soplanucas]

I am glad they are reading this thread.

[+ oldNbusted]

No better time to work out any implementation issues. As time moves on, browsers are going to become more strict and put up more warnings, not fewer. New PCI requirements go into effect next summer, part of me is looking forward to the freakout that will be happening on the vendor side.

[AndreFuture]

Why do they need a stronger security right now, when everything is for free and they are not taking personal information or CC?

A password is a form of personal information. Even this forum has a secure connection. There really is no excuse not to have this handled.

[+ oldNbusted]

Even this forum has a secure connection.

 

The forum does quite well, actually:

 

https://www.ssllabs.com/ssltest/analyze.html?d=www.companyofmen.org&hideResults=on

 

Triple DES was only recently set to lower the grade, it's required for Windows XP support, which I hope no one is still using...

[+ José Soplanucas]

I never thought of it, as a client I do not need to sign up or a password.

You all are right, hopefully they will take care of this.

[TopTierTop]

Personally, I am monitoring this thread but not signing up. Too many unknowns, and looks like they have a ways to go before I would be interested. I’m just going to wait a few more months and keep an eye on what clients and providers are saying here.

[AndreFuture]

FYI, I emailed them about a week ago regarding their lack of a SSL certificate, and this was their reply:

 

http://i66.tinypic.com/1z1ai5d.jpg

 

Today, when I checked their site, I finally saw the green lock:

http://i63.tinypic.com/2lw835y.jpg

 

So, while their operations seem to be rather roughshod, they do appear to be responsive. Time will tell how successful they become.

Edited December 12, 2017 by AndreFuture

[+ oldNbusted]

FYI, I emailed them about a week ago regarding their lack of a SSL certificate, and this was their reply:

 

http://i66.tinypic.com/1z1ai5d.jpg

 

Today, when I checked their site, I finally saw the green lock:

http://i63.tinypic.com/2lw835y.jpg

 

So, while their operations seem to be rather roughshod, they do appear to be responsive. Time will tell how successful they become.

 

 

That's good. Not sure how much this is relevant to them, but mainstream search engines are ranking unencrypted sites lower in results.