Incorrect SSL forwarding when calling steemnova.intinte.org -> No secure connection

Words
236
Reading
2 min
9y
Listen to this post
~2 min

Expected behavior

If I want to play the Steemit Variant of the online classic Ogame, I expect a secure connection. Since it is common nowadays and there is a secure connection to the web pages with log-in function I would wish that steemnova.intinte.org is also secured in the future. SteemNova should always redirect its connections immediately to a secure connection.

Actual behavior

Currently it is possible to open the page with an unsecured / unsafe connection There is an active SSL certificate, but the website does not automatically redirect to the secure connection.

If you want to play the game in a public coffee or WLAN hotspot, for example, it might be possible to get the login data in plain text for someone who is on the same network, and thus the security of your own data is not guaranteed.

How to reproduce

Just go to the website of SteemNova Moons Ogame Steem Edition:

Recording Of The Bug

enter image description here

Example of existing SSL Certificate


enter image description here

Non secured Website Alert on enter Text in Forms


enter image description here
Screenshot from .har File of Website http://steemnova.intinte.org/index.php?page=login after Login


thank you

louis88@louis88



Posted on Utopian.io - Rewarding Open Source Contributors

Incorrect SSL forwarding when calling steemnova.intinte.org -> No s... | Ecency