3 ms·
This is why mixed content warnings from browsers are an oh-so-important annoyance.
by mrkurt 16y ago
This is why mixed content warnings from browsers are an oh-so-important annoyance.
- maukdaddy 16y agoAlso why the entire login page needs to be served via SSL.
- nodata 16y agoand surely the entire site, if you want to avoid session hijacking. (and after that, all the government needs to do is require an ssl signing authority to be used by all tunisian banks, and it's back in!)
- blinkingled 16y agoThere is no such thing as Security - only the illusion, that too of Selective, Government Controlled Security :)
- mustpax 16y agoNo mixed content warnings here though. The ISP is editing the login page to include JavaScript that posts the password back, seemingly, to Facebook at http://www.facebook.com/wo0dh3ad http://www.facebook.com/wo0dh3ad. Being a man in the middle, the ISP can capture all requests to this non existent URL and harvest the passwords. The browser can't suspect a thing.
- smackfu 16y agoAlso why real companies need to be much better about not ignoring them on poorly written https pages that refer to http assets.