Log in

View Full Version : Handango security?


terrypin
11-02-2003, 05:58 PM
I went to the Handango site, clicked Members, and started to modify my credit card details. I've just had a new one, having recently had a fraudulent incident attempted with the previous card.

But then (perhaps more alert than usual) I noticed that
- there's no padlock symbol bottom right
- the URL has a plain 'http' prefix, not 'https'
I'm nervous, as I understood a secure page should have both those criteria satisfied?

I've made many Handango purchases previously, and used the Profile page before, but only now have become conscious of this.


--
Terry, West Sussex, UK
Using iPAQ 2210 with WM2003.

Oliver Mitchell
11-02-2003, 08:16 PM
have you tried changing it to https:// ?

The PocketTV Team
11-03-2003, 12:33 AM
If you are concerned about security, you should contact Handango and report the problem. If it is a real issue, they'll be happy to know about it.

Handango has had security problems in the past... e.g. for a while you could download some full commercial apps without paying by entering specially formatted URL's on their site!

terrypin
11-03-2003, 08:08 PM
If you are concerned about security, you should contact Handango and report the problem. If it is a real issue, they'll be happy to know about it.


Thanks. Did that before posting here. Still awaiting reply.

Can other Handango users please confirm those two characteristics I described please?

--
Terry, West Sussex, UK
Using iPAQ 2210 with WM2003.

tmulli
11-04-2003, 03:01 PM
It looks like the page where you enter your login is not encrypted, but shows 'https' in the address. However, clicking the 'Sign-in" button seems to encrypt the info before sending to their servers for authentication. I would rather see both at high encrypt versus just when sending.

Also, if you want better security overall, I recommend you use Opera as your web browser versus swIss chEese (IE). It's much faster, incorporates (and supports) all the latest security protocols and shows you what the REAL level of security/encryption is being used on websites. HTH...
www.opera.com