User: Password:
Subscribe / Log in / New account

Default "secrets"

Default "secrets"

Posted Jan 6, 2011 15:07 UTC (Thu) by jldugger (subscriber, #57576)
In reply to: Default "secrets" by Fowl
Parent article: Default "secrets"

SSL encrypts both directions of traffic. The first part of this is to establish the identities, usually of the server (the client generally uses a login form to establish their identity). Without SSL encrypting all traffic, someone could potentially steal your session and submit forms on your behalf, ala firesheep.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds