Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have been thinking of securing the login system by using a nice long random char password produced on the server and send it as an hidden field to the client. Then I will append the credentials with that password and encrypt it. But then I realized that since, how I append will be visible in code in javascript, its decryption will be fairly easy. So, is there any way that this technique of appending can be safe or SSL is the only option?
Anything that is sent via HTTP is visible and could be intercepted. Use HTTPS at least for login pages.