3 ms·
IIRC, an early version of myspace actually used a GET form for login. It immediately redirected, but if your browser was wide enough, and your eye was trained
by knodi123 2y ago
IIRC, an early version of myspace actually used a GET form for login. It immediately redirected, but if your browser was wide enough, and your eye was trained on the address bar and knew what to look for, you'd see the password flash by in plaintext.
- dsauerbrun 2y agowhy is that an issue? just in case someone is peering over your shoulder? the pw will be sent in the request body as plaintext on a post...
- knodi123 2y ago> just in case someone is peering over your shoulder Yes, exactly that. That's why I highlighted the risk of someone looking in the right spot at the right time. > the pw will be sent in the request body as plaintext on a post Which is how every single login form in the world works, today, for this very reason.