3 ms·
Actually, just encrypting the login is not enough. FireSheep steals session keys, not passwords. Everything that needs to have the session key needs to be serve
by die_sekte 16y ago
Actually, just encrypting the login is not enough. FireSheep steals session keys, not passwords. Everything that needs to have the session key needs to be served over SSL.
- chapel 16y agoThat's what I meant, but obviously didn't explain it correctly. Thanks for the correction.