[Tfug] [TFUG] Bank of America e-mail

[Jeffry Johnston]

As I understand it, the page that you type your username/password into
doesn't need to be encrypted, as long as the page it calls when you submit
is encrypted.  Here is a page I found on a quick google search (form not
encrypted):

http://searchsecurity.techtarget.com/expert/KnowledgebaseAnswer/0,289625,sid14_gci1265568,00.html

However, he does give a few reasons why it's dumb not to have an encrypted
login page too.

Jeff

On Nov 22, 2007 3:02 AM, andy <andyjones at cox.net> wrote:

> Be careful with E*trade, they are up to their neck in sub-prime
> investments and once mark-to-market forces really take over they may end
> up a casualty.
>
> Andy
>
> On Wed, 2007-11-21 at 23:39 -0700, erich wrote:
> > OK,
> >       I use BofA, (Not for long, I'm transitioning to E*trade), and what
> > I have
> > bookmarked is:
> >
> >
> > http://www.bankofamerica.com/index.cfm?page_msg=signoff&showstatic=no
> >
> >       I click this link, and immediately it goes to SSL. Whereupon I
> > type my login
> > & password. It has a big complicated set of web pages, with different
> URL's.
> > Some are less secure than others.
> >
> >
> > Erich
> >
> > Jude Nelson wrote:
> >
> > >Hey guys,
> > >
> > >I recently submitted a complaint to Bank of America regarding the fact
> > >that their front page (read: the page where you enter your Bank ID to
> > >access your account) has insecure elements on the page.  Here's the
> > >excerpt from their response:
> > >
> > > - While the Online ID and Passcode are presented in web form fields
> > >over an unencrypted channel, when you type the Online ID only you can
> > >see the information you type and the Passcode is displayed as
> asterisks.
> > >
> > >Yeah. Right.
> > >
> > >Jude
> > >
> > >_______________________________________________
> > >Tucson Free Unix Group - tfug at tfug.org
> > >Subscription Options:
> > >http://www.tfug.org/mailman/listinfo/tfug_tfug.org
> > >
> > >
> > >
> >
> >
> > _______________________________________________
> > Tucson Free Unix Group - tfug at tfug.org
> > Subscription Options:
> > http://www.tfug.org/mailman/listinfo/tfug_tfug.org
>
>
> _______________________________________________
> Tucson Free Unix Group - tfug at tfug.org
> Subscription Options:
> http://www.tfug.org/mailman/listinfo/tfug_tfug.org
>