WebApp Sec: Re: Must we authenticate login forms (using SSL?)?

[info () biledge com]

hi,

we do authenticate login forms with SSL or not, UAE (users  are everywhere) is
the valid one, the attack is unavoidable. kind of hit-and-hide game. then MITM is also = UITM.

if we can create a 'secure system' among all servers in the world, then we may provide
security. but if clauses are jokers sometimes, i think it is better to prefer the identity based 
security systems. you can have SSL but user may not use https. if servers can control the use 
of https, then i think things would be different in terms of security (now i feel very insecure !)..
i am just thinking though..

regards,

billur c.