We have discontinued this forum and moved support tickets to the GitHub issue tracker. More info

[BUG] [SECURITY] Update feature does not use HTTPS

Control fans on Apple hardware: iMacs, Macbooks, etc

Moderator: Steven

Post Reply
fanboy
Posts: 1
Joined: 28 Nov 2017, 00:16

[BUG] [SECURITY] Update feature does not use HTTPS

Post by fanboy »

1.  The web site uses SSL but the in-app updater uses unencrypted port 80 HTTP transfers, making updates subject to MITM attack by malicious public access point
2.  Forum search feature seems broken:

"The following words in your search query were ignored because they are too common words: https update.
You must specify at least one word to search for. Each word must consist of at least 3 characters and must not contain more than 14 characters excluding wildcards."
User avatar
Steven
CrystalIDEA Developer
Posts: 2294
Joined: 21 Dec 2009, 11:48
Location: CrystalIDEA headquarters
Contact:

Re: [BUG] [SECURITY] Update feature does not use HTTPS

Post by Steven »

Will be fixed in the next update, thank you!
Post Reply