insecure submission of eBay login

I'm glad you found the link within the sign in box to the secure page.

https://www.auctionsniper.com/securelogin.aspx

So why give people the choice - surely a secure login is the ONLY method that users should have? Would eBay approve of you allowing people to log in insecurely using their ID and password?

R2

Some users browsers and computers don't work correctly with SSL. It's a small %, but still causes problems for some.

At the time we designed and built the site eBay's own servers did not offer secure login by default. It wasn't until early 2005 from what I can tell.

Since I don't anticipate us changing this in the near future here is the link to our secure sign in page for bookmarking:

https://www.auctionsniper.com/securelogin.aspx

Sniper Sara,

While your reply is helpful in letting us know why, it brings up even more questions.

- If the amount of users/browsers who can't use SSL is such a small percentile, then why support them and allow even more potential harm to be done with folks logging in non-securely? eBay login info is practically one of the top things that hackers, phishers, etc. are hunting for.

- I am a web developer and understand your concerns about the taxing of the servers if your entire site was secure. However, you aren't providing security where it is vitally needed. For instance, if I were needing to change my ebay login info under the 'Modify Account' area, that is completely non-secure! You are paying for the secure cert. Is it only being used through the inconspicuous 'secure login' link on the main page?

Been using Auction Sniper for a couple of years now and have referred a few as well. But I am now highly concerned with the choice of non-secure as default throughout the site. It seems to hurt your credibility.

3 years on - have things changed?

R2

quote:

Originally posted by region2:
3 years on - have things changed?

http://support.auctionsniper.com/

I will bring this up to our development team. We are planning on site updates in Q1 and this one sounds like something to discuss.

Thanks for giving this a bump.

Cara

Another 2 months further on, any news?

Also what url does the android app use? I have downloaded it and the url is not editable (its not even viewable) when using it.

I am assuming it is the unsecure url and therefore will not use it.

.phil

Mandatory secure log in is on the short-term roadmap though I don't have a hard date on when it will be released.

I will update this thread when we know.

Thanks!
Cara

quote:

Originally posted by .phil:
Another 2 months further on, any news?

Also what url does the android app use? I have downloaded it and the url is not editable (its not even viewable) when using it.

.phil

Hi .phil -

I spoke with our app developer and he says that
the Android app uses https://auctionsniper.com - the SSL/secure URL.

Hope that helps!
Cara

quote:

I spoke with our app developer and he says that
the Android app uses https://auctionsniper.com - the SSL/secure URL.

Hope that helps!
Cara

Thanks Cara, that's good news.

.phil