Posted by Benjamin Niemann on 11/28/05 12:43

Sparticus wrote:

> can anyone else verify this is how it works? I need to know because I
> am making a website that needs to have the password sent via a html
> form secure.
>
> I noticed when you go to bank websites, or even gmail (google's mail)
> the login page is already a secure site.
>
> That's why I'm wondering if there is something I'm missing.

Well, if you form already contains sensitive data (e.g. prefilled login name
or even worse, prefilled password), it should be served as HTTPS. But you
should not do it anyway, browsers can prefill the login data on their own -
if the user thinks this is suffiently secure.

--
Benjamin Niemann
Email: pink at odahoda dot de
WWW: http://www.odahoda.de/

[Back to original message]