WebApp Sec mailing list archives

Re: Should login pages be protected by SSL?


From: Steve Shah <sshah () risingedge org>
Date: Tue, 21 Jun 2005 07:32:31 -0700

On Tue, Jun 21, 2005 at 12:07:34PM +0200, Amir Herzberg wrote:
experts really agree here, but since some of the companies object, I am 
interested to see if there are some serious defenses of the unprotected 
login practice.

Even with my security hat on, I'd be pressed to justify the load of an
encrypted login for a content site that just needs to identify me to
extract some marketing data from their logs. 

-Steve

-- 
Steve Shah
sshah () RisingEdge org 


Current thread: