Everybody knows they shouldn't login to anything over http:// We've all been trained to use https:// and ensure we have green checkmark security shields or whatever. Because thousands of random unknown employees maintaining the routers on the Internet could access the http traffic.
When you login via HTTPS, to google, facebook, twitter, and thousands of other sites, there are still thousands of unknown employees maintaining the load balancers and web servers at the other end, who could access the traffic. It is a no-brainer. You should not send your password or encryption keys, even over https. You need to prove you know your secret without exposing it. _______________________________________________ Tech mailing list Tech@lists.lopsa.org https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
