Martie
05-09-2001, 12:45 PM
HostCaters is pleased to announce our new resellers program. Ideal for designers who want more control over their clients.
Join our resellers, and enjoy up to 50% off our plans.
Sign up on our 50mb (or above) at normal pricing and then add your resold accts. at discounted fee.
We do charge a one-time fee of $50.00 for startup.
Check out our details here
http://www.hostcaters.com/reseller.html
James Cross
05-09-2001, 05:09 PM
Congratulations Martie, I know the new service will be a great success!
:) :) :)
Your order form is NOT secure.
<FORM ACTION="http://www.hostcaters.com/cgi-bin/oform.pl" METHOD="POST">
Data is sent using http not https.
You defeat the purpose of having ssl.
Just thought I would let you know.
Martie
05-09-2001, 07:04 PM
Originally posted by cs1
Your order form is NOT secure.
<FORM ACTION="http://www.hostcaters.com/cgi-bin/oform.pl" METHOD="POST">
Data is sent using http not https.
You defeat the purpose of having ssl.
Just thought I would let you know.
cs1...humm 1st post? Thats abit strange!
Anyway...youve certainly brought alot of traffic in for us today! About our forms?
Folks just as an FYI....hostcaters runs on a secure certificate issued by Thawte. In fact I just renewed this cert. through May/2002.. If you click on our cert. on the front page here is what you will see:
Authentic Sites use Thawte SSL Web Server Certificates to offer secure communications by encrypting all data to and from the site. Thawte has checked and verified the company registration documents and the site's registered domain name.
This information is included in the SSL certificate that we issue. This enables you to check the site's validity yourself. Always check a site's certificate before entering any sensitive information. Below are the details for HostCaters Web Services's certificate:
Organization: HostCaters Web Services
Domain: host.hostcaters.com
Country: United States
Current Status: Valid.
Valid From: 2001.04.25
Valid Till: 2002.05.23
***********************
Now we've never had one complaint of this nature ever!
In fact when I was a reseller, some 3 years ago, the same type order form was used. Many, many hosts use this same type of form, I know several!
NOW if there is concern for someone ordering, then they can use PayPal to pay for their hosting order. We accept that as well as money orders.
Having said that...here are our links to the order forms.
https://host.hostcaters.com/hostcaters/secureorder.html
https://host.hostcaters.com/hostcaters/resellerorder.html
Hope this clears it up.
Have a nice evening.:rolleyes:
Martie,
No need to be so offensive. Just trying to help you, most importantly your customers that could have there credit card info transmitted insecurely. Even upon pressing the submit button the warning is clear that the information is not sent in a secure matter.
Yes your images and html load from https/ssl
i.e. https://host.hostcaters.com/hostcaters/secureorder.html
Very good so far.
However since your form action does NOT, the customers information is transmitted in clear text not over SSL.
<FORM ACTION="http://www.hostcaters.com/cgi-bin/oform.pl" METHOD="POST">
Should be changed to:
<FORM ACTION="httpS://etc..../cgi-bin/oform.pl" METHOD="POST">
If not you defeat the purpose of using SSL.
FYI I never said you did not have SSL I said you defeat the purpose. If you leave it the way it is you might as well get your money back from thawte. All you are doing is creating an illusion that the form is secure.
(You said)
Now we've never had one complaint of this nature ever! In fact when I was a reseller, some 3 years ago, the same type order form was used. Many, many hosts use this same type of form, I know several!
(end you said)
Well I would suggest you contact those hosts and tell them there forms are insecure.
Hope you get it fixed soon.
MattF
05-10-2001, 07:14 AM
Martie, you have really made yourself look very ignorant, I find very annoying that you have completely ignored the advice of cs1 rather than checking it out. You may have a secure certificate but you're certainly not using it correctly. I reckon that before replying again to this thread that you talk to your web designer as it is clear you have little knowledge on the matter.
I don't like to add to a post in the advertisement forum, but this matter needs clarifiying.
Cs1 you are indeed 100% correct the order form is not secure; the information such as credit card details are sent to the sever unsecurely, it may load from a secure page but the information is sent to a non-secure page (i.e. as cs1 it defeats the point). Hostcaters.com is creating an illusion that the form is secure (may even fall under false advertising/deception).
cahostnet
05-10-2001, 08:01 AM
cs1, I second that. The form hasn't changed yet. It's not a secure site. The popup even tells you that. She needs to do exactly as you recommended to get it fix. Just trying to help also.
James Cross
05-10-2001, 08:08 AM
Its a bit unusual for people to start attacking advertising posts isnt it :confused:
Knowing Martie as I do, I'm sure that "if" theres a problem she will get sorted ASAP. Any further postings are really just malicious.
Martie
05-10-2001, 04:04 PM
Originally posted by cs1
Hope you get it fixed soon.
Sorry for any misunderstanding!
Just letting you know its been fixed.
<FORM ACTION="https://host.hostcaters.com/hostcaters/cgi-bin/oform.pl" METHOD="POST">
you can reach me by email if you need to admin@NOspamhostcaters.com
just remove the nospam ;)