Posted by Roman Werpachowski on 01/04/06 01:06

Luigi Donatello Asero napisal(a):
> "John Bokma" <john@castleamber.com> skrev i meddelandet
> news:Xns973EA94D3F455castleamber@130.133.1.4...
> > How is https on your site going to stop someone to create a copy of your
> > site for a phishing attack?
>
>
> It is less likely to say the least.

The reason why it is less likely is because a HTTPS site uses public
key encryption. Phisher may spoof a website but if he sticks to HTTPS,
he won't be able to decrypt any message sent by the user
(http://www.pseudonym.org/ssl/ssl_intro.html). The other option is to
make the fake site use HTTP without encryption, but this will be
noticed by more cautious users.

[Back to original message]