Comments on: Vast Majority of US Bank Websites Pose Security Risk to Users Says Study http://www.theinternetpatrol.com/vast-majority-of-us-bank-websites-pose-security-risk-to-users-says-study/ Internet Safety, Windows Updates, Internet News, and More Sat, 21 Nov 2009 23:33:59 +0000 http://wordpress.org/?v=2.6.3 By: lenins5 http://www.theinternetpatrol.com/vast-majority-of-us-bank-websites-pose-security-risk-to-users-says-study/#comment-738275 lenins5 Fri, 01 Aug 2008 16:08:02 +0000 http://www.theinternetpatrol.com/?p=1900#comment-738275 the sony bank sites sell your indormation the sony bank sites sell your indormation

]]> By: Leo http://www.theinternetpatrol.com/vast-majority-of-us-bank-websites-pose-security-risk-to-users-says-study/#comment-731549 Leo Tue, 29 Jul 2008 02:29:38 +0000 http://www.theinternetpatrol.com/?p=1900#comment-731549 "The use of insecure pages (http: instead of https:) where users might input their password" Perhaps a nit, BUT ... the pages on which the username and login feels are displayed and into which the user types their information DO NOT need to be https. (They should be, but it's purely for psychological reasons.) It's the pages that are *then* referenced by the input form's action that *must* be https. Sadly it's frequently not at all easy to tell if they are even if the data entry page is https. I have an article coming up on that shortly on Ask Leo! - http://ask-leo.com/12587 will be accessible after 7/30/2008. -Leo “The use of insecure pages (http: instead of https:) where
users might input their password”

Perhaps a nit, BUT … the pages on which the username and
login feels are displayed and into which the user types
their information DO NOT need to be https. (They should be,
but it’s purely for psychological reasons.) It’s the pages
that are *then* referenced by the input form’s action that
*must* be https. Sadly it’s frequently not at all easy to
tell if they are even if the data entry page is https.

I have an article coming up on that shortly on Ask Leo! -
http://ask-leo.com/12587 will be accessible after 7/30/2008.

-Leo

]]>