Msg # |
User |
Message |
Date |
1
|
alexmedia (0)
|
What billing they used when you tried to sign up?
|
04-10-10 06:41pm
Reply To Message
|
2
|
RagingBuddhist (Disabled)
|
REPLY TO #1 - alexmedia :
It doesn't say who the billing company is - also not a good sign. If it's not CCBill, I'm wary. If it doesn't say at all, it's a no go for sure.
|
04-10-10 06:58pm
Reply To Message
|
3
|
alexmedia (0)
|
REPLY TO #2 - RagingBuddhist :
CCBill not only one good billing company. Probably they have their own merchant account. Do you remember what was domain where you have to enter your credit card info?
|
04-10-10 07:55pm
Reply To Message
|
4
|
RagingBuddhist (Disabled)
|
REPLY TO #3 - alexmedia :
join.scorehd.com
|
04-10-10 08:17pm
Reply To Message
|
5
|
alexmedia (0)
|
REPLY TO #4 - RagingBuddhist :
Yeah, strange join form. I've never seen like this before.
|
04-10-10 08:48pm
Reply To Message
|
6
|
atrapat (0)
|
When I joined Christy Marks (also by Score) some time ago I also went through a similar page. I don't remember if the credit card page was sent through HTTPS but it was also a page hosted at score servers. I was eventually billed by an unheard of billing company but haven't had any issues afterwards.
You may try altering the http part to https. The server has a certificate but it is for score-cash.com domain (the page you receive is at scorehd.com); you will have to set up a certificate exception but you'll be able to join through a secure page.
Needless to say, an HTTPS certificate costs money (not much, just about a 100$ yearly) but for a company that conducts its business online is a must.
|
04-11-10 07:55am
Reply To Message
|
7
|
RagingBuddhist (Disabled)
|
REPLY TO #6 - atrapat :
I didn't know you could do that, but I did as you said and it did put up the encryption. But I also got the certificate warning where it says someone might be trying to intercept the data. Is that normal - and safe?
|
04-11-10 10:17am
Reply To Message
|
8
|
atrapat (0)
|
REPLY TO #7 - RagingBuddhist :
Sincerely, I wouldn't enter my credit card info if I had to do the http-https trick. It was just to offer a certain degree of security in case you really wanted to join the site.
AFAIK, communications become secure once you use the https; the warning is because the URL you are accessing (scorehd.com) doesn't match the one in the certificate (score-cash.com). But communication is encrypted and an eavesdropper would only be able to intercept the communication if he were the owner of the score-cash.com certificate.
In this case, the trick works because the server happens to have an SSL certificate installed (even though domains don't match and you get a warning) but, obviously, not all servers will have one.
|
04-11-10 10:27am
Reply To Message
|
9
|
RagingBuddhist (Disabled)
|
REPLY TO #8 - atrapat :
That's an interesting trick but I agree - I'm not about to enter the credit card info. I emailed the site to ask about the lack of encryption and here was their reply:
"We don't know why your Internet Explorer doesn't detect the (SSL) protocol. But we do want to assure you that our sites are secure. . Our website uses the Secure Socket Layer (SSL) protocol to securely transmit information on the Internet. Essentially, SSL creates a secure channel of communication between your computer and our Website's server. We are currently making updates to all our sites and we will be adding a secure Website Lock on all our sites. This will show as a Lock symbol on the top of the page which will provide our customer's the added assurance that our sites are completely secure and their information will be transferred securely. This system update should be completed by the end of the month. If you like you can revisit the site at the beginning of May and look for the Lock symbol on the top of the page. We thank you for your patience while this update is being completed."
So I guess I'll be looking at the site again in a couple of weeks.
|
04-12-10 04:47pm
Reply To Message
|
10
|
malikstarks (0)
|
REPLY TO #9 - RagingBuddhist :
I've personally never had a problem with any of the Score sites, and yes I was just recently a member of Score HD. I think the main reason they don't list the billing company on TBP is because they use so many different ones.
For instance, I think I've been a member of Score HD twice, the first time in December it was through Epoch, the second time earlier this year it was through Net billing. I've now canceled Score HD (not because it isn't good). However I still have a running membership to Scoreland which is billed through CCbill (from my checking account)
Score is a pretty reputable company, however you do need to be wary of the cross sells when signing up.
|
04-12-10 06:52pm
Reply To Message
|
11
|
BadMrFrosty (0)
|
I had a poke around and it looks like they are using Jquery encryption to send the details to the server via Javascript. So even though the address itself is not SSL encrypted, the credit card details themselves should be. Try the signup form with javascript disabled, nothing works :)
|
04-13-10 05:20am
Reply To Message
|
12
|
nostromo (0)
|
i want to join this site badly using a virtual credit card, but, nonetheless, i'm rotten with doubt due to the lack of encryption. Why pornsites have to be so iffy?
|
06-17-10 04:47am
Reply To Message
|
13
|
slategrey (0)
|
Well i signed up a couple of weeks ago and it is true that there is no encryption on the part you select your user name and pass but there is one after that part for the credit card info.
|
05-01-11 11:27am
Reply To Message
|