[mdlug] General questions on internet security

[Stan Green]

For the web question, the answer is "It Depends." If the site uses https then 
all the data, including user ID and password, are encrypted on the way back 
to the server. Some sites uses https only for the login page while others use 
it for the entire site. It depends how the webmaster set it up. If they are 
not using https, then they may not be encrypting the user ID or password at 
all. I would be careful logging into a site that does not use https for the 
login page.

Stan Green

On Sunday 19 August 2007 14:31, Drew wrote:
>      I'm looking for a knowledgeable answer on the following: Does
> ssh (and sftp) encrypt the
> entire session, or just the username-password info? Also, do "secure"
> webpages that get
> username-password info from the user (eg, Monster, Gmail, etc.)
> encrypt both username
> and password, or just the password? (Or neither?) How strong is the
> encryption in either
> case?
>
> ----
>
> - Drew.
>
> _______________________________________________
> mdlug mailing list
> mdlug at mdlug.org
> http://mdlug.org/mailman/listinfo/mdlug