Yesterday afternoon, Copernica disabled file downloads upon the discovery of a security risk by one of our users. The reporting user was able to download random files by manually altering URLs. To prevent abuse, all file downloads were disabled completely on the spot.
Copernica switches to https (and advises you to do the same)
Thursday the 1st of November, Copernica launches version 12.43 of its software. As of then, publisher.copernica.com can only be reached through secured https . Users that visit publisher.copernica.com through an unsecured http connection, will automatically be redirected to the secured version.
This only applies to users that use the software through a Copernica domain name (publisher.copernica.com for instance). We advise partners and agencies that offer the application through their own domain name (publisher.agency.com for example), to request an SSL certificate and send it to us to secure their connection to the application.
Why should I register an SSL certificate?
When logging into the software, users enter sensitive information like usernames and passwords. In the application itself they might be working with even more delicate material, like the data in their database.
By using an encrypted and secure connection, you are able to ensure that the information sent over the internet can’t be monitored or stolen by third parties. To establish a secured connection, you need an SSL certificate.
How do I register an SSL certificate?
Registering an SSL certificate can be done with various organizations. A few examples:
After you register for an SSL certificate, please send it to Copernica. We’ll put it on our servers, and make sure that your users can connect to the software through https.