Re: [cinjug-users] https login page

[Robert Fries <rgf@xxxxxxxxx>]

On Wed, 2004-04-21 at 13:30, Jason Kretzer/STAR BASE Consulting Inc.
wrote:
> Hello all,
> 
> For my current question, I need to have my login.html page be https so
> that the POSTing of the form will not be sent plain text to the
> servlet.  I am using WebSphere 5 for this.  

Actually, your login screen doesn't need be https in order to
submit secure information; the action attribute of the form tells the
browser how/where to post; the URL of your login screen only tells
you how/where the form was loaded from, and not how data from the
form will be posted.  You may want to deliver the login page
via SSL as well, but it is not necessary to protect the submission.

Sorry, can't help you with WebSphere 5.

Robert Fries
Objective Synthesis