Re: logging on .mac insecure?
- From: clvrmnky <clvrmnky-uunet@xxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 27 Oct 2005 15:32:55 -0400
On 27/10/2005 1:18 PM, rsina wrote:
Well, for what it's worth, here's the text you see if you click the ".Mac Security Policy" link at the bottom of a .Mac login page:
"Logging in To protect your personal information, .Mac requires that you log in to access certain services or account information, or after thirty minutes of inactivity.
When you log in, .Mac uses industry-standard SSL encryption to protect the confidentiality of your member name and password."
Yes I've seen that. They do say that. But if it is truly encrypted, shouldn't firefox and safari give any indication of that?
As it has been mentioned, http is not encrypted, but can be rediredted to a secure page. Wouldn't firefox or safari be able to say so if this was the case?
Not necessarily. The redirect usually happens quicker than the browser cares to update it's UI. The browser can only tell you about the current page.
For example, I do not see the Firefox address bar turn a different colour on this redirect (which happens so quickly you really have to watch for it.) Possibly Firefox is coded to ignore UI updates like this for redirects of some kind.
.
- References:
- Re: logging on .mac insecure?
- From: Tom Harrington
- Re: logging on .mac insecure?
- From: rsina
- Re: logging on .mac insecure?
- Prev by Date: 10.3.9 problems
- Next by Date: Re: 10.3.9 problems
- Previous by thread: Re: logging on .mac insecure?
- Next by thread: 10.3.9 problems
- Index(es):
Relevant Pages
|