3 ms·
It's worse than that. Back when I used PIA a few years ago, they would pass your username and password around in the query string, completely plain-text. That
by nilved 9y ago
It's worse than that. Back when I used PIA a few years ago, they would pass your username and password around in the query string, completely plain-text. That was their session mechanism. I sent them an email explaining the problem and got a refund. Their security mistakes, and the fact that they are based in the US, disqualify them for me. I really wish people would recommend someone else.
- Kadin 9y agoI would be interested to know more about this; why they were doing it at the time and if it's still being done. The use of port 80 is not really important; I'm not sure if the article's author is using "port 80" as shorthand for "unencrypted" but that's sloppy writing if so; you can certainly establish encrypted connections over port 80, of course. I used to do SSH on port 80 all the time to get around stupid firewalls...
- Hnrobert42 9y agoRasengan answers above the port 80 call is for non-sensitive data and is signed.