[TYPO3-dev] secure?: https:// user:pw at website.tld

Martin Bless m.bless at gmx.de
Mon May 21 15:01:11 CEST 2012


[Georg Ringer] wrote:

>Hi,
>
>Am 21.05.2012 10:49, schrieb Martin Bless:
>> Does anybody know: Is it insecure to write https://user:pw@website.tld
>> in the browser?
>
>depends on the context, as usual...
>if you give this link away you give away the credentials

Yes, sure. I should have been more precise. What I mean is: I someone
just observes the network traffic: Is the above notation less secure
than doing a https://website.tld first and entering and sending
username and password in a second step?

Martin



More information about the TYPO3-dev mailing list