> 1.  User name only for sign-in for the Reseller Resource Center
> ---------
> 
> Tucows is pleased to announce that we have streamlined access to the 
> Reseller Resource Center (RRC). Effective immediately,
> Resellers can sign-in using their user name only.  The password is no
> longer required.
> 
> You can access the RRC at:
> http://rrc.tucows.com
>


What the heck is this supposed to be good for? It took me TWO guesses to 
guess the username of a member of this list and get in. Username verified, 
now up for brute-forcing the password ...

Who's making such a kind of decision, an apprentice?

If I remember right there was concern on this list about the http protocol 
and possible password sniffing. Is this the answer? I can't believe it. I 
may be exaggerating, but this is not a solution. What's so difficult 
providing this via SSL? What's so difficult here that Tucows doesn't get 
it right even after the second try?




Kai Sch�tzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com
IE-Center: http://ie5.de & http://msie.winware.org



Reply via email to