Why is Mason Title website not secure?

[Theta]

Is the website name actually MasonTitle.com? Isn't it kind of weird the website does not have the little lock symbol? The link my broker sent me is the same. The form where I put the contract number, name, etc. is not secure, but when I click through to submit my deposit, it is secure.

Was this the case when any of you used Mason? Should I be concerned?

 

[CastAStone]

Is the website name actually MasonTitle.com? Isn't it kind of weird the website does not have the little lock symbol? The link my broker sent me is the same. The form where I put the contract number, name, etc. is not secure, but when I click through to submit my deposit, it is secure.

Was this the case when any of you used Mason? Should I be concerned?

Uh, that’s a big nope from me. There’s lots of title companies, you don’t have to use one whose website makes you uncomfortable.

 

[we"reofftoneverland]

I don’t like to give bad reviews but we didn’t like them.

 

[poofyo101]

Mason title is the best.

 

[princesscinderella]

I have had great communication and service from Mason too

 

[Theta]

I have had great communication and service from Mason too

Did you pay your escrow deposit through their website? The actual page that I put my credit card information in is secure, but the prior page with my name and contract number is not.

Am I being too cautious?

 

[princesscinderella]

Yes I have paid the deposit 4 different times through their website over the last few months because my BLT kept getting bought back and they kept refunding the deposit automatically. I did not have a problem with my CC.

 

[SteveH]

A while back Google wanted all sites to start using the HTTPS vs the HTTP - what really matters is when you send any information then the HTTPS matters. For example if you go to that site and go to "access your files" it takes you to another site, which is secure.

 

[michael730]

I used first American for my first contract (that was taken by Disney) and then mason for my second 2. I found mason to be much faster, one time I logged on and entered the deposit for escrow myself and the second they pulled the deposit that same day so the contract was able to be sent to ROFR the very next day! With first American it took a few days for them to do it and then also a long time to refund me my deposit from escrow. Hope that helps !

 

[macman123]

I have 13 contracts and 2000 points.

Ive requested Mason every time. They are by far the quickest and best in my opinion

 

[Grumpy Mouse]

Did you pay your escrow deposit through their website? The actual page that I put my credit card information in is secure, but the prior page with my name and contract number is not.

Am I being too cautious?

No, but whether or not the page is secure has ABSOLUTELY NOTHING to do with whether your information is secure.

Are you familiar with what happened to Magic Vacation Title a few months ago? Their portal for transmitting payment information was 'secure' - but their e-mail server was not!

They got hacked.

Afterwards, during the investigation, it was plain that *** was not following ANY security protocols with regard to customer information. They weren't deleting previously received data - nor was it being encrypted. It was ALL stored in plain text and easy to read image files. Consequently the hackers where able to send out fake payment e-mails to hundreds/thousands of customers and former customers. ANYONE who had previously done business with them had to cancel/change credit card numbers. It was a mess.

So if you really want to be secure, provide the info over the phone - or better yet - ask them what they're doing with your data once you've sent it. The correct answer is deleting it (with no copies) or encrypting it. Oh - and don't settle for the answer 'I really don't know' - because the person you speak with that handles receiving payments won't have a clue about what happens to your data.

 

[Nie0214]

Did you pay your escrow deposit through their website? The actual page that I put my credit card information in is secure, but the prior page with my name and contract number is not.

Am I being too cautious?

This is how it was for me too. As long as the payment page was secure, I was ok. They should get an SSL certificate, it’s not hard, but the payment page had it.

 

[Nie0214]

No, but whether or not the page is secure has ABSOLUTELY NOTHING to do with whether your information is secure.

Are you familiar with what happened to Magic Vacation Title a few months ago? Their portal for transmitting payment information was 'secure' - but their e-mail server was not!

They got hacked.

Afterwards, during the investigation, it was plain that *** was not following ANY security protocols with regard to customer information. They weren't deleting previously received data - nor was it being encrypted. It was ALL stored in plain text and easy to read image files. Consequently the hackers where able to send out fake payment e-mails to hundreds/thousands of customers and former customers. ANYONE who had previously done business with them had to cancel/change credit card numbers. It was a mess.

So if you really want to be secure, provide the info over the phone - or better yet - ask them what they're doing with your data once you've sent it. The correct answer is deleting it (with no copies) or encrypting it. Oh - and don't settle for the answer 'I really don't know' - because the person you speak with that handles receiving payments won't have a clue about what happens to your data.

Oh wow this is good to know. I currently have an offer in with them, and I really hated that they didn’t have DocuSign.

 

[MrWonderful]

Not being 100% ssl in these times is just lazy web management... or they just don't have a clue or care to have a clue. Takes all of 5 minutes to fully secure a site.

Google pushes/ranks them down as well, so why would they not? tsk tsk

 

[DL1WDW2]

Thanks for important info...
I also need to ask How important is it to log off ? We all complain about Disney IT for example , and then I see comments for virtual searches opening 4 different sources ( 2 phones, iPad, desktop) to try to get virtualQ Disneyland tickets and reservations . Most people do not remember to log out securely. Is this part of the problem ?