Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Should login pages be protected by SSL? Jun 20 2005 04:20PM
Amir Herzberg (herzbea macs biu ac il)
Here is a simple question: should web login forms be always protected by
SSL?

As a crypto/security expert, my answer is yes. I think this is
necessary, to protect against MITM attacks, as well as from the more
common and easy phishing, pharming, and other forms of spoofing attacks,
even usage o...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus