SSL Encryption and HTML

[urule99 at gmail.com (Blake Hartstein)]

Cody Ray wrote:
> Although the login does not occur on a secure HTML page, the login is, 
> in fact, secure. 
SSL Encryption solves multiple problems. However, when used incorrectly 
it may not solve all of the intended problems.

Privacy - Encryption of data, this is good in this case
Authentication - the user is unable to determine if the server is 
legitimate - bad in this case

> If you want to assure yourself that the information you are sending is 
> secure and you don't see a security icon, you can view the HTML source 
> code.
I don't like this advice, but it might make a good firefox plugin 
someday. There are plugins that allow you to force HTTPS, but it does 
have the possibility of breaking the server.

Blake