Please disable HTTP logins

[Hawkers]

Hey all,
I just noticed that you don't redirect logins to a HTTPS page, and even once authenticated with HTTP you remain in HTTP.

I did a capture of my own data and my own and username and password were being sent in clear text - as you get when you use HTTP.
You might want to change this or make everyone aware

 

[jim boy]

It is high on the priority list, indeed it is intended to make the whole site https only.