asp.net 2.0 - Secure Login credential without using SSL -
I am new to SSL, whatever I read and know that its paid digital certificate and the use of SSL in the website After the https: // data transfer is secured at the network level.
I do not have much security concerns except the login image and password.
There is no way to use logon and password without SSL: https: //
There are several authentication schemes Can work safely on plain HTTP The most common of these are supported by all major web browsers and virtually every web programming framework.
The bottom portion of the web site's digest is that:
-
Authentication is controlled by the browser rather than the login page on the web site. , Which does not look nearly good, and does not allow you all the adjoining works such as "forgot your password?" We have become accustomed to nowadays.
-
If you have an SSL connection, users who are understandable may feel worried that they are sending their passwords in an insecure manner (even if they are not) because They are trained to see SSL connections while entering credentials.
There are other such schemes, which are also safe on plain HTTP, but it is actually more in the API than for web sites, so maybe what you want .
Comments
Post a Comment