14 petitions

Update posted 2 months ago

Petition to Steam Development, Gabe Newell

Valve please enable steam web store full site HTTPS support

EN: Steam used to have Full Site HTTPS, and then however they disabled it, in a way that force users to access steam store over plain HTTP. In 2017, more and more web companies are switching to HTTPS -even personal blogs are HTTPS only now- and steam is still using unencrypted plain HTTP. Plain HTTP leaks personal info. Because it's not encrypted at all. Anyone on the connection route can easily see (even modify) the traffic data. Some ISPs add Ad in the HTTP web content and collect users metadata. Steam client web store is almost unusable these days in China because plain HTTP can easily trigger keyword censorship which breaks the connection (TCP RST Packet). As a result of this censorship users are getting code 10x errors. As users there isn't any workaround: using VPN with Steam client is strictly prohibited, for good reasons. The only solution is HTTPS. We need HTTPS. It can keep the connection stable. It's also a good move to protect users' personal info as well. CN: Steam 从前有全站 HTTPS,但是后来他们取消掉了。所以用户们只能使用 HTTP 来访问 Steam 商店。 在 2017 年,越来越多的互联网企业都开始使用 HTTPS,甚至个人博客也在用,而 Steam 仍在使用未加密的 HTTP。 HTTP 会泄漏用户信息,因为传输内容没有任何加密,路由上的任何人都可以查看甚至修改传输内容,一些 ISP 在 HTTP 网页中植入广告、收集用户信息。 在中国,近期 Steam 在线商店几乎处于不可用状态,HTTP 会触发审查机制,引发连接中断(TCP RST Packet),使用户持续遇到 10x 的错误信息。 作为用户,并没有什么解决方法,使用 VPN 是严格禁止的,唯一的解决办法就是 HTTPS。 我们需要 HTTPS。HTTPS 可以维持连接稳定不被审查、并且可以保护用户数据。

雨歌 如岚
121 supporters