a message for site administrators

[feh]

I wanted to raise a couple security issues regarding savingadvice.com:

• my Chrome plugin indicates it is vulnerable to the Heartbleed bug
• if you try to access it using SSL, you'll see it is using a self-signed SSL certificate
• SSL in fact does not seem to be supported; if you accept the self-signed cert, the request is not processed anyway

Are there any plans to address these issues? Thanks.

[jeffrey]

I know that Nate is working with the server hosts on this. Have forwarded to him.

[nate]

Should be good to go now. Don't think it affected us in the first place though because we didn't use SSL.

[feh]

Should be good to go now. Don't think it affected us in the first place though because we didn't use SSL.

Wow! Now that's prompt service!

Thanks Nate. One more recommendation - that the login page be served over SSL.