3 ms·
I am very uncomfortable typing in a passwsord without any security on the page. Why not secure the sign up page? So many sites makes this same mistake of not
by gibsonf1 18y ago
I am very uncomfortable typing in a passwsord without any security on the page. Why not secure the sign up page? So many sites makes this same mistake of not taking people's password security seriously. I like the approach of the form though.
- danielh 18y agoUnless the whole page uses HTTPS, securing just the login might still leave you vulnerable to session hijacking and just gives you a false sense of security. Don't use your gmail (ebay, paypal,...) password for test-driving a site you saw on HN.
- pavel_lishin 18y agoDon't use your gmail (ebay, paypal, ...) password for ANYTHING else.
- drusenko 18y agoHTTPS only matters for the page you are submitting the log-in information to, not the page you enter it on. Of course, it's difficult to tell if the page you are submitting it to is secure or not without looking at the code.