Hacker News Reader

I am very uncomfortable typing in a passwsord without any security on the page. Why not secure the sign up page? So many sites makes this same mistake of not taking people's password security seriously. I like the approach of the form though.

View on HN

Unless the whole page uses HTTPS, securing just the login might still leave you vulnerable to session hijacking and just gives you a false sense of security.

Don't use your gmail (ebay, paypal,...) password for test-driving a site you saw on HN.

Don't use your gmail (ebay, paypal, ...) password for ANYTHING else.

HTTPS only matters for the page you are submitting the log-in information to, not the page you enter it on. Of course, it's difficult to tell if the page you are submitting it to is secure or not without looking at the code.

Reply on news.ycombinator.com