122 reputation
6
bio website
location Montreal, Canada
age
visits member for 2 years, 9 months
seen Nov 15 at 3:34

Canadian Software engineer.
I am mostly interested about web and phone apps, but like all kind of programming and self teaching in general.

I am a dedicated gym person. Working out is the best thing you can do to your health and body... and Learning/self teaching is the best thing you can do to your brain.

Helping others is an eminent skill, so all respect for the SO team!

Founder/Developer of Ease My Day.
LinkedIn: Chadi Cortbaoui


Sep
24
awarded  Autobiographer
Apr
23
accepted Worthy security related certifications for a software engineer
Apr
22
asked Worthy security related certifications for a software engineer
Oct
25
awarded  Popular Question
Aug
7
accepted What security concerns exist in running a glassfish app directly on port 443
Aug
7
comment What security concerns exist in running a glassfish app directly on port 443
do you know any good tutorial for apache forwarding to localhost's 8181 port?(i have no experience with apache at all and i am not knowing how to make this work)
Aug
3
comment What security concerns exist in running a glassfish app directly on port 443
thanks a lot bro, i'll try that and will let u know
Aug
3
asked What security concerns exist in running a glassfish app directly on port 443
Jun
21
awarded  Editor
Jun
21
revised Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
deleted 4 characters in body
Apr
29
comment Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
when you go to the application, its HTTP. You can use basic functionalities (like a demo). When you want to start using your own data and other functionalities, you need to login. the login PAGE is HTTPS. when authenticated, the app redirects you to main page which is HTTP only. Yes i did read what you wrote and the links, thanks for providing them. I just asked you for your "personal" experience with HTTPS
Apr
29
comment Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
logically speaking, i am for using HTTPS only for the whole site. But why do famous large sites use it for login only? or is it just a myth the performance degrade , from your experience?
Apr
27
awarded  Scholar
Apr
27
accepted Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
Apr
27
comment Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
@martinsoteckli ohh i see! thanks a lot
Apr
27
comment Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
thx for explaining about how to force HTTPS, much appreciated! the thing is the web app is not yet in production mode, and i don't know what level of traffic it will have that's why i am not making the whole site HTTPS, because i heard it degrades performance.
Apr
27
comment Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?
thx for the help:) the web app is not yet in production mode yet, and thus i cannot anticipate how much traffic it will have. That's why i did not do the whole site HTTPS. Concerning your example about seperate cookies, it is actually a very good idea! But do i need it if switching to HTTPS happens only "Once" (only when user wants to login. I only have one https page) ?
Apr
27
awarded  Supporter
Apr
27
awarded  Student
Apr
27
asked Can a session be hijacked if the user is redirected from HTTPS to HTTP after login?