Re: Re: for the security minded web developer - secure way to login?
| From: | Per Jessen | Date: | Tue, 17 Feb 2009 08:11:12 +0000 |
| Subject: | Re: Re: for the security minded web developer - secure way to login? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-288411@lists.php.net to get a copy of this message | ||
Colin Guthrie wrote:
> I appreciate that https doesn't provide "trust" by default, but
> ultimately that's how Joe Bloggs public has been told to deal with it
> "look for the padlock" etc. etc. to be sure that your session is
> secure blah blah.
Yeah. Which is probably because all of the intricacies are way beyond
Joe Bloggs, so the issue was cut down to something about "trust".
> Now with the HV certs the UI also has the company
> name in the URL and this *is* going towards a trust infrastructure.
I googled, but couldn't find anything - what are HV certificates?
/Per
--
Per Jessen, Zürich (0.6°C)