Re: Bank Of America - sign on process - how is this secure?

From: Curious Owl (Whoot@spam.nyet)
Date: 11/26/02

Next message: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Previous message: Bill Unruh: "Re: ip address and ports"
In reply to: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Next in thread: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Reply: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Reply: Sam Simpson: "Re: Bank Of America - sign on process - how is this secure?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: Curious Owl <Whoot@spam.nyet>
Date: Tue, 26 Nov 2002 04:10:18 GMT

All corrections and elaborations appreciated!

I would think that this is only somewhat secure. Indeed if you are sure
that the login is sent via https, then you are OK. However if you do not
check the http source each time you attempt to login, then since the
page requesting your login is sent to you unencrypted, it could possibly
be modified.

Comments?

Curious

Next message: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Previous message: Bill Unruh: "Re: ip address and ports"
In reply to: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Next in thread: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Reply: those who know me have no need of my name: "Re: Bank Of America - sign on process - how is this secure?"
Reply: Sam Simpson: "Re: Bank Of America - sign on process - how is this secure?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Secure Login Form
... HTTPS should definitely be used, this web form isn't secure otherwise ... I'd recommend php, as it's server side so you are processing ... login form. ...
(Security-Basics)
Re: Passing data from a http page to https page. Is it secure?
... Theoretically, yes, it's secure. ... https to begin with. ... Yahoo Login page has 2 modes Standard and Secure. ... > standard mode the login page was an http one, but the data is being posted ...
(microsoft.public.vsnet.general)
Re: is this webpage secure?
... >> I am told by people in charge at the campus where I teach that this login ... >> page is secure, that the form login info is secure ... | via ssl, port 443). ... I just used Ethereal and the packet decode does show https to 199.17.13.240 ...
(comp.os.linux.security)
Re: is this webpage secure?
... >> I am told by people in charge at the campus where I teach that this login ... >> page is secure, that the form login info is secure ... | via ssl, port 443). ... I just used Ethereal and the packet decode does show https to 199.17.13.240 ...
(alt.computer.security)
Re: [PHP] Back to security
... Better off to do all of 1, 2, and 3 inside HTTPS. ... server before the rest of the request is decrypted. ... server once the login was successful. ... cannot grab the hash and use that, I have a random hash that is hashed ...
(php.general)