[To the Devs/Moderators] Concerning on Heartbleed. Should we change passwords?

[Bluevann]

For those who may have not heard of Heartbleed yet, here's a quick page.

http://mashable.com/2014/04/10/heart...m-fb-main-link

I would just like to know if any of the Square Enix's sites and password protection softwares did work with the support of Heartbleed. For those of us who don't have the Security Token (for various reasons I will not question), should we consider changing our passwords?

[DSN]

Testing the Lobby Servers for NA shows it is not affected

You can test sites using this webpage http://filippo.io/Heartbleed/

[Bluevann]

Testing the Lobby Servers for NA shows it is not affected

You can test sites using this webpage http://filippo.io/Heartbleed/

Cool, thanks. I was actually more concerned on the SE account management site, the Mog Station, Lodestone and forums.

[DSN]

secure.square-enix.com seems unaffected as well

[MurakumoMillennium]

Heartbleed or not, you should always change your passwords periodically anyways.

[ForteXX]

Testing the Lobby Servers for NA shows it is not affected

You can test sites using this webpage http://filippo.io/Heartbleed/

Ya, I would hope the actual game servers dont use OpenSSL.

[Quesse]

Ya, I would hope the actual game servers dont use OpenSSL.

Why is that exactly?

[Black_Wing]

Why is that exactly?

Because of Heartbleed.

[Moheeheeko]

not if you have an authenticaor.

[MurakumoMillennium]

not if you have an authenticaor.

These do NOT make an account 100% safe. They help, but don't think you can get away with "password" or "1234" and expect your account to be safe.

In fact, at launch they were more or less completely useless as it was discovered that session IDs never expired, which meant somebody could take your account with neither your password nor your token code.