4 ms·

How? SSL...

• pav3l 14y ago
  Right, nevermind...
  • maratd 14y ago
    Not so fast. You don't know if everything is coming down the pipe using SSL. They might be trying something fancy with AJAX, performing a remote call, the server spits back JSON on a regular connection, screws up the headers, and it gets cached. You really can't tell. It is a possibility.
    • espes 14y ago
      A bank pulling down user information unencrypted is only slightly better than showing it to strangers. Though you're right, it's a possibility :(
      • gst 14y ago
        I take it for granted that banks to stupid things. Just look at their password policies, for example. Many US banks basically prevent you from setting a strong password. Or my Austrian bank (http://www.easybank.at/ http://www.easybank.at/) which includes Javascript code from typekit.com to use some Adobe fonts. Makes me feel much safer knowing that the security of my online banking interface does not only depend on my bank's site, but also on the security of Adobe's site.