Security Basics mailing list archives

Re: Encrypted or Not Encrypted


From: mike () citadelis co uk
Date: Tue, 16 Sep 2008 02:36:44 -0600

Encrypted.. not good practice though - the login page/form itself should always also be delivered over SSL to ensure 
its not spoofed. Further, any pages that are included in the login page should also be delivered over SSL - 
stylesheets, js files etc.


Current thread: