News for hackers. Stuff that matters.

A comment on Review my startup: Secure webmail service.

Re:Review my startup: Secure webmail service by ammmir on Monday December 13, 2010 @04:56PM (#2002116)
security and fancy crypto on the server don't mean much if your frontend interface submits passwords in plain text over the wire. a secure service shouldn't even serve up content on non-https URLs.
[ Parent | on HN ]
Re:Review my startup: Secure webmail service by qnrq on Monday December 13, 2010 @07:25PM (#2002552)
I completely agree. We didn't install a cert since there were some doubts around wether we would sign it ourselves or not.

Either what we decide, a self signed cert is better than none, hence this is now fixed. All http traffic is now redirected to https using a 2048 bit self signed certificate :-)

[ Parent | on HN ]