Pazio.com is not secure?!

[AJ-Dodgers]

Hi,

New to using the Pazio site, but realised that this has a very serious flaw, it would seem Pazio.com doesn't have a secure HTTPS version, I have tested typing HTTPS manually with 3 different browsers and the results are concerning.

Chrome says: the site can't be reached

Firefox says: "Secure Connection Failed
The connection to the server was reset while the page was loading.
The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the web site owners to inform them of this problem."

and Microsoft Edge says:
"Cannot securely connect to this page
This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website’s owner."

So in short any info you put into Pazio risks being stolen, and since I have had the misfortune of unauthorised use of my Bank card recently, I can't trust purchasing anything from this site until Pazio fix this issue.

[Anguish]

AJ-Dodgers wrote:

it would seem Pazio.com doesn't have a secure HTTPS version...

So in short any info you put into Pazio risks being stolen, and since I have had the misfortune of unauthorised use of my Bank card recently, I can't trust purchasing anything from this site until Pazio fix this issue.

Your alarm is understandable, and Chrome's latest version stirs the pot by highlighting unencrypted connection as insecure.

That said, Paizo does have a secure-sockets site. The entire portion of the site that deals with financial transactions and transmission of digital assets (your PDFs) is all encrypted. Because it should be.

The public advertisement area and public forum area is intended to be public. There is nothing sensitive or private on the public site, by definition. While there is minimal interaction between the two aspects of the site (the public area can show you if you've bought a PDF before), the two are separated at the back-end.

In a real-world sense, it's the equivalent of having the postal service transport Burger King advertisements in an encrypted envelope... not required.

[Vic Wertz]

Anguish is correct. We wil be transitioning the entire site to SSL encryption in the near future, but rest assured that all sensitive data is (and always has been) encrypted to industry standards.

[AJ-Dodgers]

That is reassuring to hear, I have just become more paranoid over payment info after having unauthorised use of my card only a few weeks after making my first purchase from Pazio.
But that was highlighted by my bank to be due to a company in the UK being hacked, but still made me paranoid due to the timing.