Originally Posted by doritos93
Really, 2013.. please tell me more
Doesn't seem like that long ago, I ran the https everywhere beta and noscript enforcing https back then and most serious use sites worked fine. But for arguments sake I'll say 2016, post-2016 non encrypted coms is amateur hour stuff especially given that SSL/TLS has existed in some way since the late 1990's and the currently most popular TLS 1.2 was around since 2008. Hashing even using something as rudimentary as the old MD5 has existed for quite some time as well, plaint text password db's is unforgivable. Pretty sure VS which now owns OCN got owned from a plaintext password leak.