full-disclosure - Insecure http pages referencing https form-actions.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.50.0508101331490.5674-100000@kegger.national-security.net>
Date: Wed Aug 10 21:54:51 2005
From: fd at ew.nsci.us (fd@...nsci.us)
Subject: Insecure http pages referencing https
	form-actions.

On Wed, 10 Aug 2005, Leandro Meiners wrote:

> There was a loooooooonnnnnnnnnnng discussion about this at
> webappsec@...urityfocus mailing list, check out the first mail at the
> archives at
> http://www.securityfocus.com/archive/107/402824/30/390/threaded
> 
> There is even a "Hall of shame" at http://AmirHerzberg.com/shame.html.

Wow... The hall of shame is great for a laugh.  -- Thanks Leandro!