Today I went to file an application for a new job (Yes I'm still on that).
However, when I went to do so, I noticed something concerning.
I can forgive the company for offloading job applications to a third part. I've seen that before.
I can forgive the crappy 1998 web design of the third party's site.
What I can't forgive is the fact that they are exclusively using outdated, weak, and insecure encryption methods (TLS version 1.0 and earlier) to secure the channel they're using to transmit personal information including full names, work history, and even Social Security Numbers!
My personal site has far better security, and it cost me nothing to set it up!
There is no excuse!
Needless to say, I didn't apply for that job.
I sent a message to the email listed under the domain's whois, and I even contacted the home office of the company to inform them of the issue with the third party handling their employee's information.
A reminder to everyone:
Always check, before sending any personal information over the internet anywhere, that the page your using is not only secured, but secured using protocols that aren't horrendously obsolete.
(I will not point to the offending domain, as I want to give them a chance to respond and correct the issue.)
