MyZeo Website Security

published by trumpton on Tue, 07/24/2012 - 06:55
English

It is difficult to tell, but I believe that there is no encryption of username/password details when logging in to the Zeo Website.

There is a drop-down form where you enter the username / password, and once you log in, you are taken to a 'http' page, not a 'https' page, which leads me to believe that Basic Authrorisation is performed without going over a secure link.

Is this correct, and if so, users should be made aware of this, specifically users who re-use passwords for different websites / services.

Steve

Forums: