TexasCHLforum.com

txfan wrote:

Quahog wrote:

chabouk wrote:

Quahog wrote:

Fire1141 wrote:Just looked at the site. Much better info given. Nice job DPS.

Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point.

For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

Thanks chabouk... maybe I lean towards being over-cautious but I look for these things to protect my identity.

I just sent the following email and got a response in about 3 minutes


The website was recently updated as of May 1st. The site is secure.

CONFIDENTIALITY NOTICE: The information contained in this email transmission is confidential. It may also be subject to certain privileges. This information is provided based on a specific fact situation and is intended for the exclusive use of the addressee(s) named above. If you are not the intended recipient, you are hereby notified that any use, disclosure, dissemination, distribution (other than to the addressee(s) named above), copying, or the taking of any action based on this information is strictly prohibited. If you received this information in error, please immediately notify us by return email and delete this message.

Rene M.
Customer Service Representative I
Concealed Handgun Licensing Bureau

From: Cy
Sent: Tuesday, May 04, 2010 4:03 PM
To: CHLS
Subject: the new website
https://www.texasonline.state.tx.us/txapp/txdps/chl/" onclick="window.open(this.href);return false;
This website appears to be unsecure. Why are you no longer requiring my PIN to check my appl. status? Why is there no "status" information?
Is the site secure or not? i've typed in my info and realized i might have just given my i.d. "to the world"
please calm my fears.
thanks

cy

foodawg wrote:It redirects to a secure session, even if you type in http. I just went in to update my email address to verify it. It was a secure connection on the redirect.

krofang wrote:They have fixed the security issue. The site is secure as of around lunch time.

joe817 wrote:

Quahog wrote:

chabouk wrote:

Quahog wrote:
Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point. For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

Thanks chabouk... maybe I lean towards being over-cautious but I look for these things to protect my identity.

Good eye Quahog! The previous log in site WAS secure. This has to be some kind of mistake. I would not apply if it hadn't have been(secure). IMO no one should. I hope DPS rectifies their misteak.

longtooth wrote:I like the form.
Wish it was secure too. I dont know enough about that to talk but know when to agree w. the guys & gals that do.

chabouk wrote:

Quahog wrote:

Fire1141 wrote:Just looked at the site. Much better info given. Nice job DPS.

Didn't notice HTTPS on the log-in.

Even if no one else caught it, I understand your point.

For everyone else: this is not a secure connection. If you're typing in your "DL#, SSN# and DOB", you're sending it in the clear, subject to interception.

Bad, bad form by DPS to offer this change without SSL.

Fire1141 wrote:Just looked at the site. Much better info given. Nice job DPS.