Re: Must we authenticate login forms (using SSL?)?

hi,

we do authenticate login forms with SSL or not, UAE (users  are everywhere) is
the valid one, the attack is unavoidable. kind of hit-and-hide game. then MITM 
is also = UITM.

if we can create a 'secure system' among all servers in the world, then we may 
provide
security. but if clauses are jokers sometimes, i think it is better to prefer 
the identity based 
security systems. you can have SSL but user may not use https. if servers can 
control the use 
of https, then i think things would be different in terms of security (now i 
feel very insecure !)..
i am just thinking though..

regards,

billur c.