WebApp Sec mailing list archives

Re: Should login pages be protected by SSL?


From: Steve Shah <sshah () risingedge org>
Date: Tue, 21 Jun 2005 19:38:28 -0700

There may not be an advantage in breaking into that account
but consider that when grandmother registered at the web
site she probably picked the same userid and password
and password hint as she has at lots of other sites ..

And SSL does nothing to mitigate that risk.

-Steve

-- 
Steve Shah
sshah () RisingEdge org 


Current thread: