topic Re: Switching the "Get Help" area to default to https in Get Support

Switching the "Get Help" area to default to https

Rasto — Tue, 04 Jan 2022 19:17:20 GMT

Hi All,

Just a suggestion (and this may not be the correct area for this post, so I apologize) but I'd recommend setting up the "Get Help" email/contact form to use https instead of http. The reason I'm suggesting that is when I had problems porting my number, I had to enter in my PIN, my account, my email, etc. Basically all the information an 'unscrupulus' user would require to take over my account.

Just as your login pages should (and do) implement https, I'd recommend the email/contact forms do as well.

Just my 2 cents,

Jason

Re: Switching the "Get Help" area to default to https

NDesai — Thu, 31 Dec 2015 06:16:40 GMT

If you are talking about Contact us page, i see it https here.

EDIT: ohh i see, when i click Get Help, that is not https. But the bottom contact us page is.

Re: Switching the "Get Help" area to default to https

7789849803 — Thu, 31 Dec 2015 06:31:41 GMT

I'm fairly sure this is a bug - Contact Us pages were supposed to be secure in the first place. I'm writing to PM support now to get this fixed. I'll keep everyone updated on the progress as soon as I hear back.

Re: Switching the "Get Help" area to default to https

David_J — Thu, 31 Dec 2015 15:15:40 GMT

Hi - the pages should appear all as https, and I will take that away to investigate fully with our developer team to see if some scenarios where the pages wouldn't be https.

Additionally, all the information is encrypted before being passed to the Public Mobile team for a response.

Lastly, we are working on a different process which eliminates the need to pass your account information via this web form.

Hopefully this helps answer your questions.

Re: Switching the "Get Help" area to default to https

Rasto — Thu, 31 Dec 2015 16:26:39 GMT

Thanks for the response, I love Public Mobile so far (only been with you guys a few days) so I just posted this to help keep our services secure. (I hope I didn't come across trying to be a jerk or anything, that was not my intent)

🙂

As far as the information being encrypted -> the email/contact form does an http "POST" with all of the information in the form in plain text, so any "man in the middle" attacks, etc. would be able to see that information. Again -> it might not seem like a huge deal, but it still means that our PIN & email, etc. are being sent across the wire in plain text.

I've attached a screenshot that shows the email/contact form using the http protocol.

Jason

Re: Switching the "Get Help" area to default to https

7789849803 — Thu, 31 Dec 2015 19:46:28 GMT

@Rasto I think @David_J meant that this should not be happening and is currently being investigated. I'm sure he'll be back with updates once they've had a chance to look at the problem more closely.

Re: Switching the "Get Help" area to default to https

Rockdaddy22 — Thu, 31 Dec 2015 23:12:35 GMT

Welcome to PM @Rasto

Re: Switching the "Get Help" area to default to https

7789849803 — Mon, 04 Jan 2016 21:48:20 GMT

FYI for all - I just recieved a response from PM telling me that this is currently being looked at. Hopefully they'll fix it soon...

Re: Switching the "Get Help" area to default to https

David_J — Tue, 12 Jan 2016 19:35:39 GMT

Hello @Rasto (and @7789849803 , @Rockdaddy22 , @NDesai ) - we had our developers look into the issue and the contact form now defaults to https. For most people using the form this was the case, although we did find an outlier scenario which we have fixed. Thanks to all for the posting and discussion.

Re: Switching the "Get Help" area to default to https

Rasto — Tue, 12 Jan 2016 20:00:14 GMT

Any idea when those changes are being deployed? I just tested it again from both Chrome & Internet Explorer & it's still using the http protocol.

Re: Switching the "Get Help" area to default to https

NDesai — Thu, 04 Feb 2016 08:29:28 GMT

Happy to see that Get Help button link now redirects to https link.

Thanks PM for resolving this issue.

Re: Switching the "Get Help" area to default to https

7789849803 — Thu, 04 Feb 2016 16:01:03 GMT

Yay!! Finally! Something fixed, at long last!