Aaron Turner wrote:

> Both need to be wrapped in SSL for proper security.  If the form is
> not SSL then people can do MITM attacks (among others) to get the
> username/password sent to the wrong server.
> 
> 

Thanks for the clarification. :-)
-- 
Posted via http://www.ruby-forum.com/.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Talk" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to