Page 1 of 1

[FIXED] Security Warning

PostPosted: Mon May 07, 2018 1:09 am
by Shadowood
CJ

This happened awhile back and i think it was an Expired Certificate on your end.

When I log in I am getting a redirect saying the website is not secure. I can only log in by removing the s in HTTPS.

Re: Security Warning

PostPosted: Mon May 07, 2018 1:10 am
by D00T
Got the same thing when I logged in, thought it was just me.

Re: Security Warning

PostPosted: Mon May 07, 2018 1:39 am
by Rjcook
Says certification expired

Re: Security Warning

PostPosted: Mon May 07, 2018 3:46 am
by Captain Savage
renew the certificate please

Re: Security Warning

PostPosted: Mon May 07, 2018 6:08 am
by Captain Jack
It is fixed now. This is an automatically issued certificate. We do not normally have to manually interfere.
Hopefully at next automatic renewal, it will work as expected. We will work on this issue today with some upgrades and maintenance work.

Next renewal will take place around 22 of July 2018.

For detailed info:
-We use 2 certificates here. One for the www.piratesglory.com and one for s2.piratesglory.com
-The main one, is renewed manually every 5 years. It is the only certificate that has some actual security reason to exist.
-The s2 one, is renewed automatically every 3 months. This is the one that expired. There is no real security reason to use this. We use this to get rid of the annoying browser warnings.

For extra info on security:
-The most sensitive part on the website, are your custom passwords used during login. What happens then? You send us the password and the email. This is where https is really needed as we need to ensure that no one can intercept this post. Once you send this information, nowhere else your password is used again. We encrypt it and we compare it to the encrypted stored value we keep here. Which means that even if PG is hacked, your password will remain safe.

-So, when the s2 certificate expires, like it happened today, your main risk is to lose access to the Avonmora account due to an attack. To the Avonmora account, not your main account. Which means that your info such as email and credits at account are still safe. Now, whatever an attacker manages to do to your Avonmora account, do not worry. We will set it back.

At all cases, this is something hard to happen so nothing to really worry about.

Cheers

Re: [FIXED] Security Warning

PostPosted: Mon May 07, 2018 6:41 am
by Grimrock Litless
Happy to know :y