Hacker News new | ask | show | jobs
by aisdfuoi 4480 days ago
"How would you implement a secure login field on a high traffic website where performance is a consideration?" .... "wanting to serve the front page in HTTP, while needing to present the login form via HTTPs"

Maybe. There will still be a link on the HTTP page that takes you to a HTTPS page with a login form. Someone with MITM access could alter that link. A better way would be to serve all pages via HTTPS

1 comments

If "performance is a consideration", then don't encrypt everything