On 1/29/11 10:23 AM, Gerry Hickman wrote [in part]:
> 
> I also did some further testing, and notice that not all web sites 
> remember values that are typed into form fields. Could it be SSL vs 
> HTTP? I then noticed that if I go to BT (the UK phone company), it has a 
> log in box on the right, and this site does NOT appear to be SSL - 
> unless they've got SSL buried in an IFRAME or something? I thought you 
> were not supposed to enter passwords into forms unless it was SSL?
> 
> http://www.bt.com/
> 
> Anyway, on the friend's computer, he was logging into a bank and I'm 
> sure it must be SSL enabled, so I'm wondering, perhaps there's something 
> else going on. I thought it was just SM remembering values...

Some sites claim they can get user IDs and passwords encrypted on
non-SSL pages.  I don't believe it and am cautious when using such pages
to login.  User IDs are okay on non-SSL pages, but I weigh what it is
that I am protecting with a password if it is requested on a non-SSL page.

See my <http://www.rossde.com/editorials/CalOaksBank.html>.


-- 

David E. Ross
<http://www.rossde.com/>

On occasion, I might filter and ignore all newsgroup messages
posted through GoogleGroups via Google's G2/1.0 user agent
because of spam from that source.
_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to