Skip to Content.
Sympa Menu

ch-scene - Re: secu's new website

ch-scene AT lists.ibiblio.org

Subject: RTP-area local music and culture

List archive

Chronological Thread  
  • From: Chris Calloway <ifoufo AT yahoo.com>
  • To: RTP-area local music and culture <ch-scene AT lists.ibiblio.org>
  • Subject: Re: secu's new website
  • Date: Wed, 13 Apr 2005 13:53:05 -0700 (PDT)

--- ron thigpen <ron AT fuzzsonic.com> wrote:
> Chris Calloway wrote:
> > This is what most banks have been doing for
> awhile. It
> > reduces logins by one click/page serve.
>
> well, it replaces one HTTPS page serve with an HTTP
> page serve.

The presumption is the user will already have done
that one serve by going to the site via http
initially.

> prior to submitting their credentials, the end user
> can't check that the
> cert belongs to the site owner to whom they think
> they are dealing with.

which is why most bank sites will also have a "login"
link that allows the user to receive credentials in
addition to the front page quickie login. example:

http://www.bankofamerica.com

quickie no server credential login on left. three
click credentialled login link on top right.

i was going to check if ncsecu had this, but it
appears offline again.

> it's not that it's totally unsafe, but it's not the
> best they could have
> done.

agreed. i kind of flipped out the first time i saw
that "feature" on my bank site. i wrote a letter of
complaint. it appears in pretty wide use now.

3





Archive powered by MHonArc 2.6.24.

Top of Page