Nicola Posted 6 March, 2017 Share Posted 6 March, 2017 Discovered a potentially serious security flaw with Ace Kingdom this morning. The site runs on a completly unsecure connection even when logged in and depositing. Have tested with various tools (and probes) and there is no SSL certificate issued for *.acekingdom.com and the credit card processing page is not encrypted until it is transferred to Verified by Visa for final processing. Worryingly it displays personal information including previous card details via HTTP! Furthermore, although the IP addresses match genuine PlayTech game servers, all games on the site also run unsecure - which is very unusual these days. Be very careful with site and if you have deposited here previously might be worth checking for any fraud! (Ace Kingdom is licensed by the British Gambling Commission and by the Government of Gibraltar) Link to comment
Nick Posted 6 March, 2017 Share Posted 6 March, 2017 That's crazy! I'm surprised they're allowed to accept payments without https in place. Link to comment
Recommended Posts
Archived
This topic is now archived and is closed to further replies.