Is .NET Passport credential traffic secure?

Discussion in 'Security Software' started by Stan, Mar 7, 2004.

  1. Stan

    Stan Guest

    When visiting web sites that prompt for a .NET Passport username and
    password (hotmail.com, ebay.com, etc.), are the credentials transmitted in
    encrypted format? I don't always see the padlock symbol; if I do see the
    padlock symbol, it appears only momentarily, *after* I press the Submit
    button.
     
    Stan, Mar 7, 2004
    #1
    1. Advertisements

  2. Stan

    *Vanguard* Guest

    "Stan" said in news:OKdE%:
    Why would you see a padlock? Your Passport account information is not
    coming from YOU. It has already been stored and is online, so a
    Passport-enabled provider gets the info from your account, not from you.

    When you sign into a Passport-enabled web site, and because they don't
    know yet if you are really a Passport user (since they obviously don't
    want to turn away sales from non-Passport users), make sure that site
    uses an SSL secured (HTTPS) login page so your username and password get
    sent encrypted. The padlock should appear when the page is presented
    where you enter your username and password. Some sites try to use a
    program to handle the submitted data and then send it elsehwere
    encrypted but it still got sent in plain text from you to their server
    that runs that program. If you don't see a padlock (i.e., you are on an
    HTTPS web page) then I wouldn't consider the login as secure. You need
    to establish the SSL connect BEFORE you submit your data.
     
    *Vanguard*, Mar 7, 2004
    #2
    1. Advertisements

  3. Stan

    S. Pidgorny Guest

    The credentials - user name/password - are sent using encrypted channel.
    From that perspective, .Net Passport is secure.
     
    S. Pidgorny, Mar 8, 2004
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.