Why is https POST inside of http a security concern?
could please explain me why submitting secure post inside of non-secure web page security concern?
for example, http://www.ezrad.com web page , adobe flex application. when click on "register" , "join", "buy credits" , "submit" or "cash out" , "submit", why problem "join" , "submit" posts securely? don't want have host entire application via https://www.ezrad.com secure web server. slow down , create unnecessary load on server. don't need every .swf , every .jpg encrypted using ssl. need sensitive data encrypted when submitted or returned server. why adobe flex forcing me encrypt or encrypt nothing?
i agree security issue allow in reverse. if https://www.ezrad.com allowed post via http://www.ezrad.com requests, problem. leaving user impression secure application submitting non-secure requests. not asking. if browser showing http://www.ezrad.com , selectively submitting secure requests data sensitive parts of application, why problem? reminds me of older versions of internet explorer warned when data being sent securely. absurd. didn't warn practically on internet not secure. came intimating message telling "be careful, submit going secure". non-sense, backwards. there way around this? thank you!!
looks https://www.ezrad.com/crossdomain.xml required http https cross over. not "cross domain" in mind working now!
More discussions in Flex (Read Only)
adobe
Comments
Post a Comment