Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

there is a login


For the login I completely understand but most pages don't need to be secured in my opinion.


If you only secure the login you will be sending your session cookies unencrypted for the other pages and they can be intercepted and used to impersonate you.


Secure it all vs secure just the login...may as well do it all.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: