Joining sponsor programs without SSL ( HTTPS ) - GoFuckYourself.com

Donkey Punch · 06-06-2007, 07:57 AM

When you go to sign up for a sponsor and you're filling in all of your information that a ID thief would want, do you get a little iffy when the sponsors join form isn't Secure Socket Layer (HTTPS) ?

I know that I see this scenario quite frequently. What are your thoughts?

zargan · 06-06-2007, 08:08 AM

Quote:

Originally Posted by Donkey Punch

When you go to sign up for a sponsor and you're filling in all of your information that a ID thief would want, do you get a little iffy when the sponsors join form isn't Secure Socket Layer (HTTPS) ?

I know that I see this scenario quite frequently. What are your thoughts?

Hackers can sniff your credentials and change your payment info in affiliate area?

I think NATS should change this ...

Most of the sponsors still have clear text affiliate ID in URL and that is vulnerable at brute force http attacks.

If you have 100 of sponsors that it is a problem ...but if you have two, it is not

KimJI · 06-06-2007, 08:14 AM

Quote:

Originally Posted by Donkey Punch

When you go to sign up for a sponsor and you're filling in all of your information that a ID thief would want, do you get a little iffy when the sponsors join form isn't Secure Socket Layer (HTTPS) ?

I know that I see this scenario quite frequently. What are your thoughts?

How many of you fucking clickcash whore are gonne pop up this week? My Ignore list is getting long

Donkey Punch · 06-06-2007, 08:21 AM

Quote:

Originally Posted by KimJI

How many of you fucking clickcash whore are gonne pop up this week? My Ignore list is getting long

Please do not come in my thread and dis-respect me, or my sponsor of choice.

Please ignore me by all means, you most certainly have the right.

Your loss if you don't see all of the *gasp* business threads.

Thanks for your meaningful contribution.

Donkey Punch · 06-06-2007, 08:40 PM

I don't see why a sponsor would have their join or login form up without using SSL. This saddens me dearly.

06-06-2007, 07:57 AM	#1
Donkey Punch Confirmed User Join Date: Jun 2007 Location: :: PUNCH :: Posts: 1,260	Joining sponsor programs without SSL ( HTTPS ) When you go to sign up for a sponsor and you're filling in all of your information that a ID thief would want, do you get a little iffy when the sponsors join form isn't Secure Socket Layer (HTTPS) ? I know that I see this scenario quite frequently. What are your thoughts? __________________ ICQ:407-837-607 Hosting a Problem? Phat Servers = Answer

06-06-2007, 08:40 PM	#5
Donkey Punch Confirmed User Join Date: Jun 2007 Location: :: PUNCH :: Posts: 1,260	I don't see why a sponsor would have their join or login form up without using SSL. This saddens me dearly. __________________ ICQ:407-837-607 Hosting a Problem? Phat Servers = Answer