Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Should login pages be protected by SSL? Jun 20 2005 11:41PM
Andrew van der Stock (vanderaj greebo net)
Depends on the value of the system in use.

I help develop forum software, and millions of people use forum
software without SSL every day. In fact, most forum software have a
password equivalent cookie which can lead to complete compromise from
cookie stealing, and yet most users will not giv...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus