Am 08.09.2011 15:25, schrieb Marvin Addison:
Can they explain why they think security is important enough for every part
of the application EXCEPT authentication/login? :-)

BINGO!  Yeah, would _love_ to hear that one.

M

Especially since the rest of the industry usually does it the other way around if they can't afford to run the whole service on https. (login https and the rest http)
This was pretty much the setup of most freemailers before Firesheep...

Regards,

Joachim

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to