Quote:
Originally Posted by flipper35
I can think of no reason they couldn't use a certificate on their end.
|
Laziness. Pure laziness. I was asked earlier this year to test our time and attendance system before it went live. Straight port 80. I asked "why isn't this encrypted, you know you have to log into this, right?" They weren't sure how to configure it, didn't want to do it until I narced on them to our Security team. It went live with SSL, and not even a self-signed cert.
Edit: This isn't a 3 letter app from Sauk City WI, is it?