#1 26 Sep 2014 13:55

timjweaver
New Member
Registered: 26 Sep 2014
Posts: 1

your site doesn't use SSL?

I was playing with the password generator...

I created a master list of passwords on that page. I noticed the browser path didn't have a lock or an "HTTPS". How secure is this process if it's not encrypted?

Offline

#2 26 Sep 2014 19:57

Simon Sheppard
Super Administrator
Registered: 27 Aug 2005
Posts: 888
Website

Re: your site doesn't use SSL?

This password generator works using Javascript, entirely within the page, no data is ever passed back to my server. Notwithstanding this, it is a very good idea to save your own copy of this page. Keeping your own copy ensures that the password generator will still be available to you even if this website goes off-line. You can also View-Source and see exactly how the javascript works, copy it to a USB stick, email it to yourself, even upload it to your own website (it’s open source.) There are no dependent files, just save as a single HTML file.

Because it doesn't pass any data back to the server, theres no need for SSL on the connection. You can prove this to yourself either with a packet sniffer or by just saving the page locally and opening it while disconnected from the internet.

best

Simon

Offline

#3 26 Sep 2014 20:00

Simon Sheppard
Super Administrator
Registered: 27 Aug 2005
Posts: 888
Website

Re: your site doesn't use SSL?

Offline

Board footer

Powered by FluxBB