Hacker News new | ask | show | jobs
by CannisterFlux 3649 days ago
Ahhh, understood. There's someone between what you see as "ebay.com", where the GET is decrypted, and the actual ebay machine that will use the password information. I was thinking of it at the user-agent level. The GETs never leave your machine in plain text. I did not consider that the other end where you send the information could be "flakey". Bloody hell, it's a miracle anything works at all.
1 comments

Not even necessarily, but the https logs are likely archived to another server, and that server will likely be secured completely differently.