> Repeated username/combo requests over HTTPS produce patterns over multiple requests that can make cracking the encryption easier. Interesting! Do you have an

> Repeated username/combo requests over HTTPS produce patterns over multiple requests that can make cracking the encryption easier. Interesting! Do you have any references where I can read more? > As for proxies, I'm talking about someone with physical access to a device and network HTTPS really does protect against someone with physical access to the network, by encrypting the data streem and preventing man-in-the-middle attacks (except by attackers who can subborn a trusted root authority). It does NOT protect against someone with full access to the "device" where the client app is running -- someone with such access can, more-or-less by definition, view all values that the program sends (including credentials).