CJ
This happened awhile back and i think it was an Expired Certificate on your end.
When I log in I am getting a redirect saying the website is not secure. I can only log in by removing the s in HTTPS.
[FIXED] Security Warning
6 posts
• Page 1 of 1
[FIXED] Security Warning
by Shadowood » Mon May 07, 2018 1:09 am
I don't fear death. I look forward to it with great anticipation. For then I will met God face to face and let him know that I stole his Man of War!!!
-
Shadowood - Fantasy Draft Deity
- Posts: 4080
- Joined: Mon Feb 08, 2016 5:40 am
Re: Security Warning
by D00T » Mon May 07, 2018 1:10 am
Got the same thing when I logged in, thought it was just me.
God is dead. Long live the machine.
-
D00T - Posts: 891
- Joined: Tue Jul 11, 2017 7:11 pm
- Location: Down among the Lorn-Flukes
Re: Security Warning
by Captain Savage » Mon May 07, 2018 3:46 am
renew the certificate please
Tired of greedy bankers?
Well come on down to Savage Bankers !The only bank that gives you 500k Monthly for every deposit of more than 10 000 000
Open your account today
http://s2.piratesglory.com/index.php?page=bank&id=206
Well come on down to Savage Bankers !The only bank that gives you 500k Monthly for every deposit of more than 10 000 000
Open your account today
http://s2.piratesglory.com/index.php?page=bank&id=206
-
Captain Savage - Posts: 102
- Joined: Sat May 28, 2016 6:37 pm
Re: Security Warning
by Captain Jack » Mon May 07, 2018 6:08 am
It is fixed now. This is an automatically issued certificate. We do not normally have to manually interfere.
Hopefully at next automatic renewal, it will work as expected. We will work on this issue today with some upgrades and maintenance work.
Next renewal will take place around 22 of July 2018.
For detailed info:
-We use 2 certificates here. One for the www.piratesglory.com and one for s2.piratesglory.com
-The main one, is renewed manually every 5 years. It is the only certificate that has some actual security reason to exist.
-The s2 one, is renewed automatically every 3 months. This is the one that expired. There is no real security reason to use this. We use this to get rid of the annoying browser warnings.
For extra info on security:
-The most sensitive part on the website, are your custom passwords used during login. What happens then? You send us the password and the email. This is where https is really needed as we need to ensure that no one can intercept this post. Once you send this information, nowhere else your password is used again. We encrypt it and we compare it to the encrypted stored value we keep here. Which means that even if PG is hacked, your password will remain safe.
-So, when the s2 certificate expires, like it happened today, your main risk is to lose access to the Avonmora account due to an attack. To the Avonmora account, not your main account. Which means that your info such as email and credits at account are still safe. Now, whatever an attacker manages to do to your Avonmora account, do not worry. We will set it back.
At all cases, this is something hard to happen so nothing to really worry about.
Cheers
Hopefully at next automatic renewal, it will work as expected. We will work on this issue today with some upgrades and maintenance work.
Next renewal will take place around 22 of July 2018.
For detailed info:
-We use 2 certificates here. One for the www.piratesglory.com and one for s2.piratesglory.com
-The main one, is renewed manually every 5 years. It is the only certificate that has some actual security reason to exist.
-The s2 one, is renewed automatically every 3 months. This is the one that expired. There is no real security reason to use this. We use this to get rid of the annoying browser warnings.
For extra info on security:
-The most sensitive part on the website, are your custom passwords used during login. What happens then? You send us the password and the email. This is where https is really needed as we need to ensure that no one can intercept this post. Once you send this information, nowhere else your password is used again. We encrypt it and we compare it to the encrypted stored value we keep here. Which means that even if PG is hacked, your password will remain safe.
-So, when the s2 certificate expires, like it happened today, your main risk is to lose access to the Avonmora account due to an attack. To the Avonmora account, not your main account. Which means that your info such as email and credits at account are still safe. Now, whatever an attacker manages to do to your Avonmora account, do not worry. We will set it back.
At all cases, this is something hard to happen so nothing to really worry about.
Cheers
-
Captain Jack - Project Coordinator
- Posts: 4043
- Joined: Tue Feb 08, 2011 1:12 am
- Location: Pania
-
Grimrock Litless - Posts: 2591
- Joined: Thu Aug 13, 2015 2:50 pm
- Location: Under the sea, in a submarine!
6 posts
• Page 1 of 1
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Design by PiratesGlory.com
Design by PiratesGlory.com