Site security question....

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • m0rph3us
    Confirmed User
    • Mar 2001
    • 2033

    #1

    Site security question....

    I hear that it is very hard or even impossible for hackers to try to hack a login method where the user must enter the login/password over an SSL 128bit form. This sound correct? If so, why is it that they can't hack that... proxies don't support SSL?
    <font size="2" face="Tahoma"><a href="http://www.18blowjobs.com/webmasters/?640" target="_blank">Get paid $25 per signup</a> listing over <a href="http://galleries.18blowjobs.com/hosted.html" target="_blank">100 free hosted video galleries</a> - <a href="http://www.18blowjobs.com/webmasters/?640" target="_blank">Check it</a> ยป </font>
  • Ludedude
    Suck it!
    • Jun 2001
    • 4432

    #2
    Originally posted by m0rph3us:
    I hear that it is very hard or even impossible for hackers to try to hack a login method where the user must enter the login/password over an SSL 128bit form. This sound correct? If so, why is it that they can't hack that... proxies don't support SSL?
    I don't think it has anything to do with proxies or the like. SSL basically encrypts the communication between the server and the browser making it practically impossible to sniff or eavesdrop the password. If they do manage to grab a password though, SSL won't prevent them from using it. If paysites were to issue certificates using SSL, it would make it that much harder as the user would need to authenticate his/her identity with that certificate to the server. Not likely to happen in the near future due to the relative complexity of this method. Most paysites have guardian programs that will shut down passwords in short order if they're coming from too many different IP addresses at once etc. which should work just fine.

    ------------------
    Make BANK with these Babes!
    The Webmaster's Folder
    The Midnight TGP2 Submitter

    Comment

    Working...