Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

jquery and post method security with an https url

suppose I do

$.post('https://somesite.com', {username : "somename", password : "somepassword"}, function(){
   //do something
});

notice that the site's url is prefixed with https...

Does this imply that jquery will use HTTPS connection to relay that username and password info?

IE. will this prevent some hacker from intercepting that message and obtain the username and password data? IE. is this just as secure as logging in manually with a form in a https enabled site?

If not, what should I do to make this post transmission just as secure as someone manually logging into a site using a login form...(Ie. make it unable to be intercepted by some hacker)

like image 241
kamikaze_pilot Avatar asked Nov 24 '11 00:11

kamikaze_pilot


1 Answers

Yes the login is fine, but this doesn't guarantee the session is secure. You probably haven't read OWASP a9, and your application is probably vulnerable.

like image 106
rook Avatar answered Sep 30 '22 16:09

rook