4 ms·
Why would you insist on a homepage, with no secure information or login form whatsoever, have SSL security on it? Neither Quicken nor Mint do this on THEIR hom
by gacba 16y ago
Why would you insist on a homepage, with no secure information or login form whatsoever, have SSL security on it? Neither Quicken nor Mint do this on THEIR home pages.
- leftnode 16y agoI didn't know there was a secure.blueleaf.com subdomain, and I don't use Mint or Quicken. Financial sites should be secure by default, load times be damned.
- tannerburson 16y agoBut what's insecure about the marketing pages being sent in the clear? It's common practice to setup a subdomain for your secure communications so that you aren't having to send images, javascript and public pages through HTTPS. Load times are part of the reason, but the other is that it takes more resources on the server end too. I'd love to hear your actual reasoning on this though.
- blasdel 16y agoBecause the users go to the marketing page to find the login button. You're still just as vulnerable to MITM.