Security is only as strong as its weakest link

The IEBlog highlights common pitfalls in building SSL/TLS websites

Critical Mistake #1: Non-HTTPS Login pages (even if submitting to a HTTPS page).
Critical Mistake #2: Mixing HTTP Content into a HTTPS page.

As a end-user if you are prompted to download mixed content while accessing a secure website, always choose "No".

Comments