Urban Institute e-postcard submission site security flaw

If anyone here uses the free e-postcard submission site run by Urban Institute on behalf of clients

formatting link
please be aware of a security flaw. If you use the secure site, after logging in, you are taken to the insecure site,
formatting link
What I've been doing after submitting credentials is backing up to the initial page (usually backspace or clicking on the left arrow on top) then reloading the page so that it recognizes submitted credentials in the cookie. Then you are submitting information through the secure site, not the insecure site.

I've reported this twice through Tech Support on UI's site and a Tech Support address on IRS's Web site, but I get canned responses back. I followed up to both using the ticket tracker the system created, but simply got another canned response back. This won't be addressed any time soon.

The adage "You get what you pay for" doesn't really apply. I believe Urban Institute is a government contractor, so it would be lovely if they'd correct it.

I don't use

formatting link
but I wonder if there's a similar security flaw. Anyone?

Reply to
Adam H. Kerman
Loading thread data ...

BeanSmart website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.