WebApp Sec mailing list archives

Re: Should login pages be protected by SSL?


From: Michael Silk <michaelslists () gmail com>
Date: Tue, 21 Jun 2005 10:23:04 +1000

On 6/21/05, Amir Herzberg <herzbea () macs biu ac il> wrote:
Here is a simple question: should web login forms be always protected by
SSL?

Yes.

But of course, as we all know, no-one cares about SSL certificates,
nor will they ever, IMHO. So ..

-- Michael


Current thread: