Encrypted pages with unencrypted content

Topher javert42 at cs.byu.edu
Fri Aug 17 11:56:53 MDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan Duncan wrote:
> 
> On 17 Aug 2007, at 10:34, Topher wrote:
> 
>> Can you give me a list of any pages that serve up both encrypted and
>> unencrypted content?  I'm doing a little work on analyzing BYU's poor
>> security for its website, and I want to know how prevalent this
>> practice is.
>>
>> For an example of what I'm thinking of, try: http://ry.byu.edu/
>>
> 
> What is the purpose behind this?  You are looking for other web sites
> that also exhibit this problem?  Are you trying to prove something to
> someone there at BYU?

Yes, I'm looking for other web sites that do the same thing.  It's just
for a project I'm doing to show people the risks of using certain types
of login forms on the web.  I'm not preparing it for anybody in particular.

- --
Topher Fischer
GnuPG Fingerprint: 3597 1B8D C7A5 C5AF 2E19  EFF5 2FC3 BE99 D123 6674
javert42 at cs.byu.edu | http://www.thetopher.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFGxeFkL8O+mdEjZnQRApVeAJ4xhBav1PTEn7SINf9ppHmTYbwKrgCfXd0m
iN5HlcJvw71WxyzoCb4HuQg=
=K7Cc
-----END PGP SIGNATURE-----



More information about the PLUG mailing list