[bug] Wrong ssl cert on forum site

test

Wrong ssl cert on forum site: wrong domain.

Roman

Hello,

Thank you for feedback. could you please tell us why do you need SSL certificate on the forum where there is no sensitive information being transferred?

Roman

P.S. SSL support enabled.

test

Roman said:

Thank you for feedback. could you please tell us why do you need SSL certificate on the forum where there is no sensitive information being transferred?

For login and register, I think a password is a sensitive information
(I often use free hotspots, so ssl is needed to protect against spoofing & sniffing)

Roman said:

P.S. SSL support enabled.

Thanks!

I would recommend you to check your ssl config, actually there seems to be a security flaw by the new DROWN attack.
https://www.ssllabs.com/ssltest/analyze.html?d=community.time4vps.com

Roman

Hello,

Thank you for note regarding SSL certificate security. We have reviewed results which provided by SSLlabs and our server configuration. No SSL security flaws was detected, it's possible that SSLlabs tool is outdated or inaccurate.

ewe

@Roman: Yeah, shurely ssllabs is outdated or inaccurate...
People who say on a forum, there is no sensitive information transfered, dont know what they talkin about.
SSLLabs know exactly what they are doin, and mostly they are right.