These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
12Next page
 

Security Certificate on Account Management site expired???

First post
Author
Letrange
Chaosstorm Corporation
#1 - 2012-02-27 01:23:47 UTC
Subject says it all, What's up with that?

(was kinda going to pay for one of my alt accounts - but that kinda stalls it...)
J Random
Peoples Liberation Army
Goonswarm Federation
#2 - 2012-02-27 01:30:53 UTC  |  Edited by: J Random
No it's not you Letrange and no you aren't being MITM (the SSL Observatory can confirm this as can Convergence)

This why Eve sucks at technology (hence database corruption issues, etc). Multi-million dollar company and you can't remember to f'ing update your cert .. that takes what, ten minutes once every couple years? Also it doesn't slip through the cracks as your CA will send you snail mail and call you a million times before to nag you. This is what happens when you let coders and sales run your company.

Cert Expire: ‎Sunday, ‎February ‎26, ‎2012 1:59:59 PM [local to me]
Johan Civire
Caldari Provisions
Caldari State
#3 - 2012-02-27 01:33:25 UTC
J Random wrote:
No it's not you Letrange and no you aren't being MITM (the SSL Observatory can confirm this as can Convergence)

This why Eve sucks at technology (hence database corruption issues, etc). Multi-million dollar company and you can't remember to f'ing update your cert .. that takes what, ten minutes once every couple years? Also it doesn't slip through the cracks as your CA will send you and call you a million times before to tag you. This is what happens when you let coders and sales run your company.

Cert Expire: ‎Sunday, ‎February ‎26, ‎2012 1:59:59 PM [local to me]


to bad but indeed Idea
Letrange
Chaosstorm Corporation
#4 - 2012-02-27 03:26:03 UTC
Humm, someone needs to bat phone CCP Streggs (sp) as it would seem to me that this falls under his bailiwick. Let's see if that security@eveonline.com works...
rodyas
Tie Fighters Inc
#5 - 2012-02-27 04:48:08 UTC
That is funny. Anyone have spare security certs? Make a quick sale to CCP with one.

Signature removed for inappropriate language - CCP Eterne

Stonecrusher Mortlock
The Scope
Gallente Federation
#6 - 2012-02-27 05:36:00 UTC
i want to see a video dev blog about this just BECAUSE i think it would be funny.
Flocka Seagulls
Aliastra
Gallente Federation
#7 - 2012-02-27 05:37:37 UTC  |  Edited by: Flocka Seagulls
Of all the things they could forget to do. Now I have to buy a time card from someone that DID re-up their certs just to keep my alt going...

NEVERMIND, Shattered Crystal is out of stock! What a way to end my sunday night...
Ranger 1
Ranger Corp
Vae. Victis.
#8 - 2012-02-27 05:40:37 UTC
You mean people actually pay attention to that?

Hell, I've been to Microsoft pages that had expired certs. Big smile

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.

J Random
Peoples Liberation Army
Goonswarm Federation
#9 - 2012-02-27 06:25:42 UTC
Letrange wrote:
Humm, someone needs to bat phone CCP Streggs (sp) as it would seem to me that this falls under his bailiwick. Let's see if that security@eveonline.com works...


Except it's not. PKI maintenance falls squarely under the O&M tech staff. Staff IT security is just inside consulting and monitoring for the most part.

Ranger1: Who wouldn't pay attention to it on a site where you enter your trusted credentials. MITM happen all the time and are very prolific.

What really killing me here is here we are like eight hours and still not fixed .. this is a ten minute fix for christ sake.
J Random
Peoples Liberation Army
Goonswarm Federation
#10 - 2012-02-27 17:50:05 UTC  |  Edited by: J Random
A wildcar certificate is not the answer and breaks the promise of PKI even if your CA will issue you one. Once again, can a mutli-million dollar company that makes heavy use of the web take a whole ten minutes and understand at least the basics of PKI and SSL.

PS: Yes I know RFC2818 allows for wilidcard certs but the challenge is the clients (i.e. browsers) don't handle them correctly as they are suppose to flag a warning regardless of whether the cert is legit or not.
CCP Explorer
C C P
C C P Alliance
#11 - 2012-02-27 19:56:09 UTC
We are aware of this issue and are working on resolving it.

Erlendur S. Thorsteinsson | Senior Development Director | EVE Online // CCP Games | @CCP_Explorer

Bumblefck
Kerensky Initiatives
#12 - 2012-02-27 19:59:54 UTC
In the meantime, please continue handing over your credit card / account details to an unsecure site ^^

Perfection is a dish best served like wasabi .

Bumble's Space Log

Blawrf McTaggart
Imperial Academy
Amarr Empire
#13 - 2012-02-27 20:01:17 UTC
sreeeeeeeeeeeeeegs :argh:
CCP Explorer
C C P
C C P Alliance
#14 - 2012-02-27 20:03:06 UTC
Bumblefck wrote:
In the meantime, please continue handing over your credit card / account details to an unsecure site ^^
This should be fixed and https://secure.eveonline.com/ should have a valid certificate now.

Erlendur S. Thorsteinsson | Senior Development Director | EVE Online // CCP Games | @CCP_Explorer

CCP Nullarbor
C C P
C C P Alliance
#15 - 2012-02-27 20:11:33 UTC
The people responsible for paying the cert bill must be ex goons. Figures.

CCP Nullarbor // Senior Engineer // Team Game of Drones

Alpheias
Tactical Farmers.
Pandemic Horde
#16 - 2012-02-27 20:17:44 UTC
CCP Nullarbor wrote:
The people responsible for paying the cert bill must be ex goons. Figures.


Why be trolling brah! 'DIS BE SERIOUS.

Agent of Chaos, Sower of Discord.

Don't talk to me unless you are IQ verified and certified with three references from non-family members. Please have your certificate of authenticity on hand.

Lors Dornick
Kallisti Industries
#17 - 2012-02-27 20:18:15 UTC
CCP Nullarbor wrote:
The people responsible for paying the cert bill must be ex goons. Figures.


At least CCP didn't drop sov on the domain.

CCP Greyscale: As to starbases, we agree it's pretty terrible, but we don't want to delay the entire release just for this one factor.

Feligast
Brutor Tribe
Minmatar Republic
#18 - 2012-02-27 21:35:13 UTC
CCP Nullarbor wrote:
The people responsible for paying the cert bill must be ex goons. Figures.


We're bad at bills Sad
Ranger 1
Ranger Corp
Vae. Victis.
#19 - 2012-02-27 21:42:32 UTC
CCP Nullarbor wrote:
The people responsible for paying the cert bill must be ex goons. Figures.


BWAHAHAHAHahaha...

Ahem, sorry. Smile

View the latest EVE Online developments and other game related news and gameplay by visiting Ranger 1 Presents: Virtual Realms.

Cipher Jones
The Thomas Edwards Taco Tuesday All Stars
#20 - 2012-02-27 21:52:27 UTC
Bumblefck wrote:
In the meantime, please continue handing over your credit card / account details to an unsecure site ^^


Because no site with a certificate was ever hacked or insecure. AND every site w/o one is completely compromised. Thank got I have IT pros like you in my life.

internet spaceships

are serious business sir.

and don't forget it

12Next page