Hello,
If I was you, I'd close all my accounts and use another bank.
Regards,
--
Jason Muskat | GCUX - de VE3TSJ
____________________________
TechDude
e. Jason@TechDude.Ca
m. 416 .414 .9934
http://TechDude.Ca/
From: <wilson.amajohn@gmail.com>
Date: 18 May 2006 14:57:49 -0000
To: <webappsec@securityfocus.com>
Subject: Non SSL Bank Login Forms
Hello all, my question is how can a form have a field that is secure without
using SSL. From my web programming experience I cannot understand a Bank's
claim that their login form is secure when there is no SSL used. "Signing on
to secure sites from an unsecure page is a common industry practice" The POST
data has to get to the server if SSL is not used how can they claim it is
secure? I hope I have clarified my question enough
Thanks
John
-------------------------------------------------------------------------
Sponsored by: Watchfire
Watchfire named worldwide market share leader in web application security
assessment by leading market research firm. Watchfire's AppScan is the
industry's first and leading web application security testing suite, and
the only solution to provide comprehensive remediation tasks at every
level of the application. See for yourself.
Download a Free Trial of AppScan 6.0 today!
https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
--------------------------------------------------------------------------
-------------------------------------------------------------------------
Sponsored by: Watchfire
Watchfire named worldwide market share leader in web application security
assessment by leading market research firm. Watchfire's AppScan is the
industry's first and leading web application security testing suite, and
the only solution to provide comprehensive remediation tasks at every
level of the application. See for yourself.
Download a Free Trial of AppScan 6.0 today!
https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007t9c
--------------------------------------------------------------------------
