I've been scouring security now podcasts for this info because I know it was touched on. Alas, no go on finding it. I do remember however that they had said that it is not uncommon for the front page to not show encryption, but it will be because the page the information is going to IS encrypted.
http://blog.washingtonpost.com/securityfix/2005/08/bank_sites_still_driven_by_mar_1.html A washington post article with the same conclusion. I'll keep looking for the podcast because it did contain more detail about why this is the way it is. Mike On 7/19/07, Michael S. Altus <[EMAIL PROTECTED]> wrote:
Should login pages be secured (https)? A bank has a login page that has account holders log in with their user ID and password on an unsecured (http) page. This goes to a secure site (https). A bank staff person told me that the log in page need not be secure. Is that correct? Thanks, Michael Michael S. Altus, PhD, ELS Intensive Care Communications, Inc.(r) Biomedical Writing and Editing Baltimore MD; [EMAIL PROTECTED] ************************************** Get a sneak peek of the all-new AOL at http://discover.aol.com/memed/aolcom30tour ************************************************************************ * ==> QUICK LIST-COMMAND REFERENCE - Put the following commands in <== * ==> the body of an email & send 'em to: [EMAIL PROTECTED] <== * Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name * Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST * Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L * New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress * Need more help? Send mail to: [EMAIL PROTECTED] ************************************************************************ * List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/ * RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml * Messages bearing the header "X-No-Archive: yes" will not be archived ************************************************************************
************************************************************************ * ==> QUICK LIST-COMMAND REFERENCE - Put the following commands in <== * ==> the body of an email & send 'em to: [EMAIL PROTECTED] <== * Join the list: SUBSCRIBE COMPUTERGUYS-L Your Name * Too much mail? Try Daily Digests command: SET COMPUTERGUYS-L DIGEST * Tired of the List? Unsubscribe command: SIGNOFF COMPUTERGUYS-L * New address? From OLD address send: CHANGE COMPUTERGUYS-L YourNewAddress * Need more help? Send mail to: [EMAIL PROTECTED] ************************************************************************ * List archive at www.mail-archive.com/computerguys-l@listserv.aol.com/ * RSS at www.mail-archive.com/computerguys-l@listserv.aol.com/maillist.xml * Messages bearing the header "X-No-Archive: yes" will not be archived ************************************************************************
