this post was submitted on 18 Jul 2023
10 points (81.2% liked)

Discussions related to Infosec.pub

1254 readers
2 users here now

founded 2 years ago
MODERATORS
jerry
10
Passwords sent as plaintext? (self.infosecpub)
submitted 2 years ago by iamak to c/infosecpub
20 comments fedilink hide all child comments
 

I tried logging in on browser and I had inspected the request. My password was sent in plaintext. Is this a infosec.pub issue or a Lemmy one?

you are viewing a single comment's thread
view the rest of the comments
[โ€“] vedard 5 points 2 years ago (1 children)

Because it provides no advantage. TLS is used to secure any data sent to a server. If you don't trust the server with your password, then you should use a unique password for this website. In fact, you should always use a unique password.

https://www.cloudflare.com/en-ca/learning/ssl/transport-layer-security-tls/

[โ€“] iamak 2 points 2 years ago

Okay. I am pretty new to this stuff so I'll go and check out SSL/TLS. Thanks :)