Home/ Questions/Q 3489770
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-18T11:26:06+00:00

I understand how ssl works, so the browser sends the username/password encrypted. But what

  • 0

I understand how ssl works, so the browser sends the username/password encrypted. But what happens next ?

Does the client receive a cookie ? Is it secure ? How does the server-browser communicate safely if the only https page is the login page ?

I think if someone get’s a copy of that cookie when it’s being sent, they can acces that account, no matter how encrypted is the cookie

Actually I want to understand the process from login to logout in a secure web application.

Server: Tomcat, Apache …
Platform: java, php, …

Thank you

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Episode 195 of the security now podcast deals with this topic in some depth. http://www.grc.com/securitynow.htm
    You can either scan the transcript (which I would recommend to do first in order to find out, wether it answers your questions) or listen to the whole episode.

    • 0