0

If a webpage is served over https and to authenticate it receives both login and password as unencrypted POST parameters (free text) is it considered unsafe?

Improve this question
2
  • 1
    Do you mean the POST goes over HTTPS (encrypted), or the POST goes over a different HTTP URL (not encrypted)?
    – user
    Jun 15 at 16:30
  • the POST goes over HTTPS
    – Luke G
    Jun 15 at 17:57

0

Reset to default

Browse other questions tagged or ask your own question.