Suggestion: Default to https for entire site to avoid MITM attacks

[Nx01King]

I use the secure form of http when I connect to the site only for it to be downgraded upon logging in at nexusmods (dot) com proper. This is a security and privacy risk as username and passwords are out in the clear. Meaning the site, our information, can be subject MITM attacks! I can force https for the whole site but downloads would break due to them being unsecured, http.

 

Fixing these two issues would ensure:

1) confidence in the users being who they are and not some bots through compromised accounts.

1) confidence in the files uploaded and downloaded being what they are meant to be. (still scan though)

 

Thank you for this lovely site and community.

[DoctorKaizeld]

this is a subject that Dark is aware of and has made several posts on already.

[Nx01King]

Thank you qwertyzeldar for the update. I'm a bit new here. I see that my concern was raised in a couple of posts here, and the admin is working on it. That's fantastic news. This site is a good find! :)

[Thandal]

For the interim, one can always log-in to the "Forums" side, (fully https) then switch to the "Files" area and stay logged-in.

 

(That's what I do.)