Hi there,

I don't know if someone already mentioned this, but the SSL used on the
program and registration page seems very unsafe. The SSLeuth addon for
firefox rates it 4.7 out of 10. Points are:

Bulk-cipher: RC4-128 bits (Considered unsafe)
HMAC: SHA-1 (Reportedly weak)
No perfect forward privacy

Also there's no extended validation but I guess we don't have to waste
money on SSL certs. Still, I'd like the admins to consider tweaking the
server with this:
https://cipherli.st/

Thanks and best regards
Benjamin

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to