WebApp Sec mailing list archives

SSL Question


From: "bob" <bob () calweb com>
Date: Mon, 22 Dec 2003 13:23:17 -0800

If I send out an https link with authentication information
in it, is the initial HTTPS Get command with the tokens sent
in the clear or does this happen after the SSL session
handshake is established ?


Current thread: