Re: Wachovia Bank web site

Generally, that's not the case: if submitting credentials gets you to a secure page, that doesn't mean the credentials were encrypted.

In case of Wachovia though the credentials are secure.

IE has "Submit non-encrypted form data" security setting to control the related behaviour.

--
Svyatoslav Pidgorny, MCSE, RHCE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

PA Bear [MS MVP] wrote:
You're OK then.

metspitzer wrote:
On Oct 5, 4:35 pm, "PA Bear [MS MVP]" <PABear...@xxxxxxxxx> wrote:
Does the "lock" show after you've logged-in?
--

The lock does show up after I log in. That is, after I have furnished
my username/password.
.

Relevant Pages

  • Re: Mixing authentication type flags & By design Bug from MS ?
    ... Additionally, if you want to force a Kerberos bind, you ... can specify Delegation in addition to Secure, ... That said, if you specify credentials, it should use the credentials you ...
    (microsoft.public.dotnet.security)
  • Re: passing credentials
    ... asking for the credentials or it might just send the default ones. ... credentials are secure over wired, they'd be secure over wireless to the ... The web service is currently in development and under my control, ...
    (microsoft.public.windowsce.app.development)
  • Re: Secure Web-Based Administration
    ... > The best option would be to set up sudo to allow this webserver ... somewhat nicer and imho nuch more secure. ... These very same credentials (password + ... passphrase) are then used to store the changed data in a database. ...
    (Focus-Linux)
  • Re: Secure Network Credentials
    ... A more secure solution would be to use integrated authentication when possible. ... I order for the web-service to authenticate correctly, it needs to be provided with the correct network credentials. ... I know this isn't a 100% secure solution because at some point the password is in memory as clear text, so my question is: Is there a better way to do this? ...
    (microsoft.public.dotnet.security)
  • Re: Forms Authentication - Confused!
    ... it will check the credentials defined ... > You should use the location tag to secure the contenteditor directory. ... > You should place the following snippet inside your root /web.config file. ... >> the web.config file in the folder to be secured again, ...
    (microsoft.public.dotnet.framework.aspnet)
Quantcast