Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
The Case:
UI JQuery Dialog should contain credit data of customer, when the rest of the page is product catalog in http.
Question:
Its possible to secure Jquery ui dialog with https when the rest of the page in http? or all the page have to be https and not only dialog?
(What I know that dialog is part of the page because that its cant be secure, but my boss say i wrong).
Thanks
The answer is without a doubt NO. If you don’t protect the entire session with HTTPS then an attacker will obtain the session id and use that instead of username/password.
What you are describing is a clear violation of The OWASP top 10: Broken Authentication and Session Management.