I have recently found that the starma bug tracker does not use HTTPS anywhere on the site, not even on the login and registration page which is a very bad security practice. I wish to file a report on this issue in the relevant place, but judging by this line on the site "Report a bug for Starmade, the launcher or our registry service." it doesn't look like that is the right place to file a report about the actual tracker. I don't know if this is the right place to ask about this, but I didn't know where else to, so I was wondering if someone could point me in the right direction for reporting an issue such as this one about the tracker itself?
- Joined
- Jul 17, 2013
- Messages
- 1,429
- Reaction score
- 205
DukeofRealms
Count Duku
- Joined
- Sep 4, 2013
- Messages
- 1,475
- Reaction score
- 1,616
Done, Phabricator now forces HTTPS everywhere, with a year long HSTS header.