Uploading to Trainz imaging host has unencrypted password

[hiawathamr]

My security program has stopped an upload from happening due to the myTrainz password being sent over the internet unencrypted (aka plaintext).
Usually these occure when the certificate hasn't been renewed.
So as a precaution, I haven't tried this again until this is resolved, as I don't want some middle person getting the password

Cheers

 

[HiBaller]

Which security program are you using?

Bill

 

[hiawathamr]

Bitdefender.

Cheers

 

[HiBaller]

One of the better ones. I use Emsisoft and it catches all sorts of things you wouldn't suspect were happening. Did the alert give you which HTTP option is was using (HTTP:// or HTTPS:// )?

Bill

 

[hiawathamr]

No, didn't say which protocol it tried to use - it said it stopped a privacy threat because an attempt was made to connect to a unsecure Trainz site that N3V is hosting for the images.

Cheers

 

[HiBaller]

I agree with your initial analysis. Looks as if the certificate may have dropped out of date. Usually, when a site's certificate is good, the PW is encrypted. I forgot to renew my own site cert and Chrome gave me grief over it.

Bill

 

[clam1952]

If that's the Trainz Gallery it's https, not showing anything amiss here when loging in, are you uploading from within Trainz which might be the cause as it doesn't need a login other than that TANE or TRS19 is logged in.