User talk:Csoma: Difference between revisions

m
No edit summary
Line 3: Line 3:
== SSL auth required for "send password" (FORM) ==
== SSL auth required for "send password" (FORM) ==


    * This is an optional, but stongly recommended feature suggested during install
* This is an optional, but stongly recommended feature suggested during install
    * Sending password with FORM.send or Javascript.Send check if the page is SSL encrypted and will display an error message if there's no valid SSL certificate.
* Sending password with FORM.send or Javascript.Send checks if the page is SSL encrypted and will display an error message if there's no valid SSL certificate or if the password is sent clear text.
    * Will not allow adding "*" to FORM.edit field from Javascript (avoid sproof)  
* Will not allow adding "*" to (or changing) FORM.edit field from Javascript (avoid sproof)  


This way a user will get warning when tries to log in to an unsafe service, like phising sites. All sites with authentication should have valid SSL certificate or should be added to "safe to login" list.
This way the user will get warning when tries to log in to an unsafe service, like phising sites.
All sites with authentication should have valid SSL certificate or should be added to "safe to login" list.
6

edits