Larian Banner: Baldur's Gate Patch 9
Previous Thread
Next Thread
Print Thread
#656485 02/11/19 08:16 PM
Joined: Nov 2019
stranger
OP Offline
stranger
Joined: Nov 2019
Hi guys,

In this day and age, I would prefer all registration pages to go through an https website, and the passwords to be stored in an encrypted format. It doesn't seem the case with this forum. The website is not secured and the passwords are stored in plain text. Proof of that is in the confirmation email received where the password is shown plainly. There is practically no point for anybody to generate complex passwords when they are not encrypted.

Hope you guys have a plan to fix this in the future. This is 2019 and cyber-security is every bodies concern.

Thanks.

P.S. I thought I was posting this thread under General/Suggestions. Not sure how it ended under BG3. A moderator should move it if possible, please.

Last edited by SmokingHobbit; 02/11/19 08:18 PM.
Joined: Mar 2003
Location: Canada
Support
Offline
Support
Joined: Mar 2003
Location: Canada

Passwords are not stored in plain text; they are sent by email, which isn't current best practice, but then hashed and only the hash is stored.
There are plans to update the forum, eventually, including for better security.

Raze #656492 03/11/19 01:19 AM
Joined: Nov 2019
stranger
OP Offline
stranger
Joined: Nov 2019
Originally Posted by Raze

Passwords are not stored in plain text; they are sent by email, which isn't current best practice, but then hashed and only the hash is stored.
There are plans to update the forum, eventually, including for better security.


Thank you. Good to hear that.

Joined: May 2010
Location: Oxford
Duchess of Gorgombert
Offline
Duchess of Gorgombert
Joined: May 2010
Location: Oxford
As this has come up, it may be a good time for me to send my periodic nag to those concerned!


J'aime le fromage.
vometia #656524 04/11/19 05:05 PM
Joined: Nov 2019
stranger
OP Offline
stranger
Joined: Nov 2019
Originally Posted by vometia
As this has come up, it may be a good time for me to send my periodic nag to those concerned!


Nagging alongside. Do it, do it... now smile

Joined: Mar 2003
Location: Canada
Support
Offline
Support
Joined: Mar 2003
Location: Canada

The forum has been updated to https, and passwords are no longer being sent by email.


Moderated by  Larian_QA, Lynn, Macbeth, Raze 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.5