Hello All,

SSL for login
I recently had some criticism on a site I developed because we are not using SSL on the login page.  I had hoped to avoid the hassle of implementing that, however, I now have to respond to my customer, and justify not using it, or else implement it.

Can I has if there is any recommended reading on this topic?  Do I really need it, what are the downsides of now encrypting the U and P other than to avoid sniffing of the traffic.



the second question that was raised was why we are supplying the password in clear text, in an obviously two way encryption algorithm.  I was accused of having '5 year old technology'.  That smarted a little :)  However, I do think his question is valid,
why do we store our passwords like this,
is there an option in DNN to use one way encryption for passwords, and 
is there a way to avoid sending the password out, IOW, to pretend we are using one way encryption.

thanks in advance for any comments on these two related questions,

Mark

---

Mark Breen Ireland 1987 BMW R80 g/s

 I've not tested this, but I would think it was quite easy.
- add a new page to the site - named (say) Login
- add an Account Login module to the page.
- TEST IT TO MAKE SURE YOU CAN LOGIN WITH THE NEW PAGE
- in site settings choose the new Login page for logging in
- mark the new page (in settings) to require a secure connection

Am I missing somthing?

---

Best wishes,
- Richard
Agile Development Consultant, Practitioner, and Trainer
www.dynamisys.co.uk

Hello Guys,

thanks for the very useful responses here.

I appreciate your time,

Mark

---

Mark Breen Ireland 1987 BMW R80 g/s