Quote from: boosh on February 02, 2019, 11:15:59 AM

Quote from: Haze4days on February 02, 2019, 09:23:05 AM

Quote from: adaseb on February 02, 2019, 07:45:22 AM

Quote from: Haze4days on February 02, 2019, 02:21:51 AM

Reported this issue numerous times but the problem still exists...

I don't get redirected to the secure https:// but to http:// I have to manually add the s, the dev already said they had a weird regional thing before with their SSL certificate.

I'm one of the few who pays attention to such things but I wonder how many people don't and my post on the forum got deleted and I already reported this 4 weeks ago to support.

https://i.imgur.com/oVc0yzY.jpg

It's quite severe in my opinion. Undecided

Are you sure your computer isn't compromised, maybe check your hosts file and you might have a redirect to some other domain.

Because I've tried 3 different browsers, I manually put in "www.primedice.com" and each of them redirected to the correct HTTPS.

Normally its easy to tell when you are not on a HTTPS because there is a warning shown near the address that its not secure and most people would notice this.

Go download a Ubuntu live CD, and try and go to primedice from there and see where it takes you. Most likely it will redirect to the HTTPS meaning your OS might have malware or such.

I have Ubuntu and I have windows 10 on a separate laptop and use mint on another, primedice is aware of the issue because they had it before Josh one of the devs told this on primedice forum and I had several scans on PD's domain from my own web-hosting with proof it was not secure, I didn't save the screenshots since I did a fresh install of Ubuntu last night and the images are gone with it and primedice deleted the post containing those images on their forum. I might do some new tests if I can't retrieve the images on imgur but helping primedice with bugs and issues always kind of s**ks because they never reward people for reporting them, so doing scans and making new screenshots even writing these posts actually feels as a waste of time for me. But if someone is from the Netherlands, visits primedice for the first time enters his credentials makes a deposit and their money could be gone the moment it confirms on the site because there was no secure connection protecting the data and on primedice there is a high percentage of hacked accounts and money that's withdrawn from users without them knowing at the time and support always is so sure it is on the users end because my bug report got waven away initially as well and not directly forwarded to the devs, and if such leaks exists regional and/or incidental it is not good and how many of those hacked accounts is because of this?

There is no failure in redirecting on my side, once my browser knows the https address it redirects me there, so the failure is on primedice side and it's a regional thing as stated by the dev.

And you are so wrong that most people would see this, these are the same people uploading pictures of their drivers license to instagram or their passport to twitter and then wonder why their identity got stolen, they don't even know the urgency and the meaning of HTTPS let alone pay attention to it sites from banks and such give a warning to check the web address to be correct and that it shows HTTPS for a reason and a very good reason, it's like saying people's accounts are secure because everyone knows to never use a password twice while where I come from 2 out of 3 people use the same password not twice but everywhere.

Edit: My deleted post to primedice forum... Undecided

https://forum.primedice.com/topic/34947-connection-to-pd-domain-is-not-secure-by-default/

Edit: Edit:
It has no use, primedice staff only cares for stake these days anyways.

Having the same issue, since 1 month and from same region EU

Glad I'm not the only one.

I found the cached page of the forum if it's any use: http://webcache.googleusercontent.com/search?q=cache:https://forum.primedice.com/topic/34947-connection-to-pd-domain-is-not-secure-by-default/

The post with screenshots of the scans I posted to the forum, so a server located in the EU gives the same result and it seems to happen incidental.

Quote

I ran 2 tests with 2 different domains, one with duckdice.io domain inserting http://duckdice.io I got this as a result:

https://i.imgur.com/soBAlbu.jpg

Primedice domain inserting http://primedice.com I got this first as a result:

https://i.imgur.com/0Q5U1v7.jpg

Second result for primedice domain:

https://i.imgur.com/k3CmVug.jpg

So there is some variation in redirecting...

Edit:

Well I did what I had to do, a few days ago told this to support, and now posted here, my tests prove it is not on my end but on PD's end.

Either they need to check the .htacces file, contact the webhost about the SSL certificate or start enabling 'HTTP Strict Transport Security'

Correct me if I'm wrong...

Haze4days

Posts

Merits