Vulnerability Development mailing list archives

Re: Secure Yahoo logins


From: David Schwartz <davids () webmaster com>
Date: Tue, 27 Aug 2002 21:02:57 -0700


My other question is if the passwords are encrypted why do they offer a
secure login
option? How does that increase security, other than adding a brief ssl
session.

        Because otherwise a man-in-the-middle could serve you a web page that didn't
do any fancy hashing. ;)

        DS



Current thread: