It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
mrkgnao: A layman's question:
What is the benefit of having https for pages that contain only public information (e.g. game catalogue)?
avatar
shmerl: Your activity should be private to you. Since all traffic should be viewed as intercepted (as now well known), it basically means that using open traffic is like carrying a tracking device with you (which also records what you do) that some Big Brother can always access. What are the implications of that is not really as important as the question of whether you even find that acceptable. I don't think anyone should. So having all traffic encrypted by default is the only way to improve this at least in some way.

See also https://en.wikipedia.org/wiki/Room_641A
Thank you. I understand better now. And I applaud you effort.

I myself have no illusions of privacy in either real or digital life and I therefore do not strive to maintain what I believe is already non-existent. Https will not make me feel less intruded upon than http. My only hope is that I am boring enough so that nobody would ever want to spy on me.
I have not checked it myself yet, but is the Galaxy Client accessing the Store and Forums via HTTPS?
HTTP also opens the data provider up to harm. Witness the attacks orchestrated in China where traffic from websites has been compromised to inject javascript into documents-in-flight, instructing user browsers to perform DDOS attacks on third parties.

This sort of mechanism is not limited to DDOS scenarios, and makes it easier to perform other nefarious actions as well.
So, HTTPS seems to work everywhere on GOG for me this day. o__O

I think I will wait a bit before celebrating, but looks good so far.
avatar
Gydion: So, HTTPS seems to work everywhere on GOG for me this day. o__O

I think I will wait a bit before celebrating, but looks good so far.
It just got much better indeed, but it's not fully there yet. A lot of resources on secure pages use insecure src (i.e. check out the HTML content of secure page and you'll find many <img src="http://static.gog.com/..." or <img src="http://www.gog.com/... and so on).

At least pages don't fall back to HTTP anymore. Some progress!
Post edited May 14, 2015 by shmerl
This is going to be fixed: https://www.gog.com/news/twostep_login_https_everywhere

Thanks GOG!