Re: Basic password security question

No. You should look at the wire traffic. That is just for the UI displayed
by the browser.

If you are doing a secure site where you will be collecting data like
passwords and potentially using cookies for authentication, you must use
SSL.

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Opa" <Opa@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5CD20844-7860-4BAB-BD57-AB0DBB43B991@xxxxxxxxxxxxxxxx
Hi all,
I was asked today if setting textmode="password" of a textbox control
was secure over http. I assumed that the browser does encryption before
sending it over the wire. Why aren't most login screen forms sent over
https?
Is my assumption about the browser providing encryption on special input
fields true? Can anyone explain?

Thanks,

Opa


.

Relevant Pages

  • Re: Where request came from/referrer
    ... UrlRefer is filled in by the browser and optional. ... No matter how the user comes to my app I am getting "nothing". ... When using the logon I am still ... Is that because it is coming from a secure site (the ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Form posting to other and sending email
    ... It still doesn't work as the secure site is set to retrieve info for a ... Even though I have named the confirmation page, my browser ... > secure site it seems to work. ...
    (microsoft.public.frontpage.client)
  • Selenium, secure connection failed, security certificate
    ... I am doing some testing with Selenium, ... The site I am testing is a secure site with username and password. ... new browser is opened, and this browser is cleen like a freshly ... The certificate is not trusted because the issuer certificate is ...
    (comp.lang.ruby)
  • Re: browser history - back button.
    ... the best you can do is expire the pages, so the browser will rerequest them ... (unless the user turns this off). ... -- bruce ... > We are developing a secure site. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: OT - Re: Internet Explorer 7
    ... And encryption isn't one of those mechanisms. ... and Firefox doesn't display it in the same broken way that IE does. ... I'm focusing on functionality. ... broken browser and it renders as they expect there, ...
    (rec.collecting.coins)