Hacker News new | ask | show | jobs
by andreofthecape 2851 days ago
The login page has ssl. https://enterprise.surety.com/MyAbsoluteProof/ChangeMyAccoun...
1 comments
jwfxpr 2851 days ago
If the page that links to the login page hasn't proven it's secure, I shouldn't trust the links, and therefore shouldn't trust the destination. Hence why static landing pages need HTTPS just as much as login pages.
link
gpvos 2850 days ago
Fair enough, although you could check that the domain names are the same in this case.
link