Welcome GUEST!      CREATE ACCOUNT - Forgot Password?

Create an account to share your experiences and more!

E-MAIL   PASS  

Auto Log-in Future Sessions (on this computer).
User Comment A note about the site and any replies from other users.

Visit Score HD

Score HD (2)

RagingBuddhist (63) 04-10-10  05:13pm
Rookie Badge  Talk Back  Comments  Pollster  Top Monthly User  Trusted User  Male Profile TRUST USER?   YES (64), NO (0)

No encryption on signup?

I went to join this site just now and noticed there's no encryption on the page where you enter your desired nick, password and email address OR the page where you enter your credit card information. That's on both Firefox 2 and Opera 10. I can hesistantly forgive the lack of encryption for the nick/password/email page, but not where you're entering credit card information.

Reply To Comment

Comment Replies (13)

Replies to the user comment above.

Msg # User Message Date

1

alexmedia (22) What billing they used when you tried to sign up?
04-10-10  06:41pm

Reply To Message

2

RagingBuddhist (63) REPLY TO #1 - alexmedia :

It doesn't say who the billing company is - also not a good sign. If it's not CCBill, I'm wary. If it doesn't say at all, it's a no go for sure.
04-10-10  06:58pm

Reply To Message

3

alexmedia (22) REPLY TO #2 - RagingBuddhist :

CCBill not only one good billing company. Probably they have their own merchant account. Do you remember what was domain where you have to enter your credit card info?
04-10-10  07:55pm

Reply To Message

4

RagingBuddhist (63) REPLY TO #3 - alexmedia :

join.scorehd.com
04-10-10  08:17pm

Reply To Message

5

alexmedia (22) REPLY TO #4 - RagingBuddhist :

Yeah, strange join form. I've never seen like this before.
04-10-10  08:48pm

Reply To Message

6

atrapat (112) When I joined Christy Marks (also by Score) some time ago I also went through a similar page. I don't remember if the credit card page was sent through HTTPS but it was also a page hosted at score servers. I was eventually billed by an unheard of billing company but haven't had any issues afterwards.

You may try altering the http part to https. The server has a certificate but it is for score-cash.com domain (the page you receive is at scorehd.com); you will have to set up a certificate exception but you'll be able to join through a secure page.

Needless to say, an HTTPS certificate costs money (not much, just about a 100$ yearly) but for a company that conducts its business online is a must.

04-11-10  07:55am

Reply To Message

7

RagingBuddhist (63) REPLY TO #6 - atrapat :

I didn't know you could do that, but I did as you said and it did put up the encryption. But I also got the certificate warning where it says someone might be trying to intercept the data. Is that normal - and safe?
04-11-10  10:17am

Reply To Message

8

atrapat (112) REPLY TO #7 - RagingBuddhist :

Sincerely, I wouldn't enter my credit card info if I had to do the http-https trick. It was just to offer a certain degree of security in case you really wanted to join the site.

AFAIK, communications become secure once you use the https; the warning is because the URL you are accessing (scorehd.com) doesn't match the one in the certificate (score-cash.com). But communication is encrypted and an eavesdropper would only be able to intercept the communication if he were the owner of the score-cash.com certificate.

In this case, the trick works because the server happens to have an SSL certificate installed (even though domains don't match and you get a warning) but, obviously, not all servers will have one.

04-11-10  10:27am

Reply To Message

9

RagingBuddhist (63) REPLY TO #8 - atrapat :

That's an interesting trick but I agree - I'm not about to enter the credit card info. I emailed the site to ask about the lack of encryption and here was their reply:

"We don't know why your Internet Explorer doesn't detect the (SSL) protocol. But we do want to assure you that our sites are secure. . Our website uses the Secure Socket Layer (SSL) protocol to securely transmit information on the Internet. Essentially, SSL creates a secure channel of communication between your computer and our Website's server. We are currently making updates to all our sites and we will be adding a secure Website Lock on all our sites. This will show as a Lock symbol on the top of the page which will provide our customer's the added assurance that our sites are completely secure and their information will be transferred securely. This system update should be completed by the end of the month. If you like you can revisit the site at the beginning of May and look for the Lock symbol on the top of the page. We thank you for your patience while this update is being completed."

So I guess I'll be looking at the site again in a couple of weeks.

04-12-10  04:47pm

Reply To Message

10

malikstarks (8) REPLY TO #9 - RagingBuddhist :

I've personally never had a problem with any of the Score sites, and yes I was just recently a member of Score HD. I think the main reason they don't list the billing company on TBP is because they use so many different ones.

For instance, I think I've been a member of Score HD twice, the first time in December it was through Epoch, the second time earlier this year it was through Net billing. I've now canceled Score HD (not because it isn't good). However I still have a running membership to Scoreland which is billed through CCbill (from my checking account)

Score is a pretty reputable company, however you do need to be wary of the cross sells when signing up.

04-12-10  06:52pm

Reply To Message

11

BadMrFrosty (56) I had a poke around and it looks like they are using Jquery encryption to send the details to the server via Javascript. So even though the address itself is not SSL encrypted, the credit card details themselves should be. Try the signup form with javascript disabled, nothing works :)
04-13-10  05:20am

Reply To Message

12

nostromo (12)
i want to join this site badly using a virtual credit card, but, nonetheless, i'm rotten with doubt due to the lack of encryption. Why pornsites have to be so iffy?

06-17-10  04:47am

Reply To Message

13

slategrey (13) Well i signed up a couple of weeks ago and it is true that there is no encryption on the part you select your user name and pass but there is one after that part for the credit card info.
05-01-11  11:27am

Reply To Message

*Message rows highlighted in light orange are replies to replies.

Home - Sites - Users - Reviews - Comments - Categories - Forum

Contact Us - Announcements - FAQ's - Terms & Rules - Porn Review - Webmasters

Protecting Minors
We are strong supporters of RTA and ICRA, two of the most recognized self labeling organizations. Our site is properly labeled to assist in the protection of minors accessing inappopriate content. For information about filtering tools, check this site.

DISCLAIMER: ALL MODELS APPEARING ON THIS WEBSITE ARE 18 YEARS OR OLDER.

To report child pornography, go directly to ASACP!  We're proud to be a corporate sponsor.
Have concerns or questions about porn addiction?  We recommend this helpful resource.

Copyright © 2007 Ranks.com, Inc. and its licensors. All Rights Reserved.


Loaded in 0.02 seconds.