I found some sites using https:// for login page
What are the advantages of using ssl in a login page, also these guys are used a sub domain for login, why should I set a sub domain for login, is it another server for handling login process ?
How can I set https in my site ?
Thank you very much
The benefit is that the login session will be over SSL/TLS and thus will be relatively secure, unless the user has a keylogger, or the Man In The Middle is not:
A government agency
The ISP.
A large corporation.
A master, highly motivated hacker.
Basically SSL certs protect you from anyone who the Root CA won’t take money from. These actors probably don’t want the average users social networking login, so in practice that’s pretty secure.
It’s a great idea, really. SSL the login page and the user/pass is encrypted.