logo

New Response

« Return to the blog entry

You are replying to:

    • avatar
    • Marcin
    • Posted on Wed 24 Sep 2003 18:58

    Jerry - I presume when you say "Secure Site" you mean SSL encrypted site. Your password is in cleartext in the packet, but the whole communications channel between your browser and the web server is encrypted with SSL. Even the URL string that is being sent to the webserver is sent across the encrypted channel. All that would show up in a proxy's logs is that you connected via SSL to "secure.example.com", but not what page(s) you requested, since the requests were encrypted between your browser and the server the proxy doesn't know.

Your Comments

Name:
E-mail:
(optional)
Website:
(optional)
Comment: