Your account
A password has at least 12 characters and is stored only as a hash. Attempts to sign in are limited in rate.
A session lasts at most 30 days and ends when you sign out. Its cookie cannot be read by scripts on the page and is sent only over HTTPS.
Connections
Every Progmasoft site is served only over HTTPS, and browsers are told to keep it that way (HSTS). Every page carries a Content Security Policy, which allows only the scripts the page itself names and the analytics script of Cloudflare.
Malicious software on ViGet
Uploading malicious software to ViGet is forbidden: software that harms, spies on or takes control of the computers it runs on, or that does something other than what it says it does.
When we find such software or are told about it, we take it off ViGet: its files are no longer served, and are kept out of reach only as evidence. We close the account that uploaded it and give the IP address of the upload to the competent authorities, as the Privacy Policy describes.
Every plugin ViGet serves is listed with its SHA-256 digest, and Tazel checks the digest before it uses the plugin.
What we ask of you
Choose a password you use nowhere else, sign in only on devices you trust, and sign out on a computer you share.
Reporting a weakness
If you find a security weakness in a Progmasoft site, product or package, write to [email protected] with what you found. Please give us time to fix it before you make it public, and do not read or change the data of other people while you test.
See also: Privacy Policy