alexkon

14 ms·

1. 121.▲
   by alexkon 17y ago

   Contrary to popular belief, it doesn’t make much sense to protect the password without protecting the whole session (that is, without serving most of the site over HTTPS). If just the login page is encrypted, any attacker who is now prevent
2. 122.▲
   by alexkon 17y ago

   Here’s the announcement from the Mozilla Security Blog: http://blog.mozilla.com/security/2009/07/27/locking-up-the-v... I wonder how the initial request could be made secure. With the current proposal, if you happen to work over a comprom
3. 123.▲
   Mozilla proposes an HTTP header to force HTTPS-only connections(forcetls.sidstamm.com)

   10 points by alexkon 17y ago|8 comments
4. 124.▲
   by alexkon 17y ago

   What data are they collecting?