Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Penetration Testing
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
RE: username and Password sent as clear text strings May 15 2008 02:34AM
Shenk, Jerry A (jshenk decommunications com)
That's certainly not ideal but it seems pretty common. The whole idea
of SSL is to encrypt the traffic en-route so that makes it all ok,
right;) The whole burden rests on doing SSL right and never having the
user click ok on one of those boxes about the SSL hostname not matching.
So, obviously it'...

[ more ]  




 

Privacy Statement
Copyright 2008, SecurityFocus