Security Issue: Mojang.com doesn't use encrypted connection (HTTPS) by default
The issue
When you literally only enter the URL mojang.com (which is technically http://mojang.com), the encrypted Mojang site (https://mojang.com) won't automatically be used.
Effects
This opens up the possibility for hackers and eavesdroppers to manipulate the content of the site and spy on users of the unencrypted http://mojang.com site.
Tags: redirect, redirection
2017-02-23, 10:49 AM
2022-01-16, 02:16 AM
2017-04-03, 12:53 PM
0
0
encryption, http, https, privacy, redirection, security, url