Any security issue with sending login data with jQuery?

Question

A short answer - is there any security issues in sending e-mail + password through ajax to another page? :)

My thought is, that the information could maybe be grabbed in the sending, which may be a flaw compared to doing it "the conventional way" with just a form-action with a "link" to the login-action page.

Thanks in advance..

Answer 1

Its the same if you send your password with a Form over POST or send an Ajax request over POST. You should use SSL then the requests is enrypted and save.

But you should use a POST request. Don't send your password over GET its not the best way.

jQuery/AJAX login form submit on enter

Answer 2

The "conventional way" that you refer to is as bad as POSTing an AJAX request. Sending via HTTPS instead of HTTP gives you better security (but sceptics would quickly point out that some encryption schemes used via HTTPS are trival to decode)