View Single Post
  #1 (permalink)  
Old 06-23-2005, 05:32 PM
danlefree's Avatar
danlefree danlefree is offline
WebProWorld Pro
 
Join Date: Jun 2005
Location: Seattle
Posts: 269
danlefree RepRank 4danlefree RepRank 4danlefree RepRank 4danlefree RepRank 4danlefree RepRank 4
Default Ethical question relating to unsecured forms...

If a form appears on a server which doesn't even support SSL and is POSTing to a script on the same server directly (no call to any fancy Javascript encryption functions, just a plain old POST) it's pretty likely that information sent by a user submitting the form would be an easy target for interception at the user's network level.

I've seen a fair number of forms like the aforementioned, lurking on rental application sites, credit or background check sites, even the occasional credit card application site...

We all know they're out there - unsecured forms with fields like "Social Security Number" or "Bank Account Number". My question is, what do you do when you come across one?
Reply With Quote