Reply to thread

Message: [QUOTE="Karl Seguin [MVP], post: 8229038"] you go to a non secure page (the yahoo login page) and enter your username and password into the text box. At this point nothing is insecure because the information you've entered only exists on your computer - it hasn't been submitted over the internet. You hit submit, the browser does a new request to the action address, in this case it's under SSL and sends along the username/passwords you entered in the box. This information is encrypted because the request is made over SSL. You seem to be thinking that because you enter information in a non-SSL page, then the information is submitted without encryption. But the information is submitted as part of the request initiated by the form submit to the form action, which is using ssl. Karl [/QUOTE]