Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Also why the entire login page needs to be served via SSL.


and surely the entire site, if you want to avoid session hijacking.

(and after that, all the government needs to do is require an ssl signing authority to be used by all tunisian banks, and it's back in!)


There is no such thing as Security - only the illusion, that too of Selective, Government Controlled Security :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: