Re: Insecure http pages referencing https form-actions.

[Leandro Meiners <lmeiners () cybsec com>]

Eric,

There was a loooooooonnnnnnnnnnng discussion about this at
webappsec@securityfocus mailing list, check out the first mail at the
archives at
http://www.securityfocus.com/archive/107/402824/30/390/threaded

There is even a "Hall of shame" at http://AmirHerzberg.com/shame.html.

Regards,

Leandro.

----------------------------
Leandro Meiners
CYBSEC S.A. Security Systems
E-mail: lmeiners () cybsec com
Tel/Fax: [54-11] 4382-1600
Web: http://www.cybsec.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/