Posted: Mon Feb 23, 2009 10:12 am Post subject: [Updated] Website security changes
In order to improve security for our customers, we've begun making a series of changes to the way security and account logins are handled at Xstreet SL. Since much of our service is money-related, it's imperative that we tighten things up to keep your funds and your accounts safe.
The first of these changes went live yesterday. Previously, cookies stored in your web browser were used to keep account logins persistent for up to a month at a time. Now you will be required to login whenever a new "session" is started. Furthermore, if you use multiple browsers or multiple computers and log out of your account on one computer, all of the others will be logged out as well.
Over the next few days and weeks we'll be making your accounts more secure, but this generally won't involve noticeable functionality changes. Once we've reached a certain point we'll review options for making security less intrusive by requiring logins less often.
Last edited by Calyle Linden on Tue Feb 24, 2009 5:45 pm; edited 1 time in total
I'd like to clarify my last post because it seems the message was misunderstood by most people. It's my fault for not explaining properly and for that I apologize.
The current login situation is temporary. As I explained in the last paragraph of my first post, we're currently doing work in this area. Once we've reached a certain level of security we'll review options for making it less intrusive by requiring logins less often.
I'll explain that further. Internally, we've already reached that point and internally have already reduced the login requirement so it's similar to before last weekend.
This is a complex change involving a lot of pieces. It has the potential to break functionality if we aren't stringent in our testing, so it will be a little longer before it is launched to the production site. In the meantime, the temporarily tighter login requirement is necessary. Please just bear with us for a little longer - a better way is coming.