UA on the web security issue?
Feb 12, 2000, 7:42 pm
#1
Original Poster
Join Date: Aug 1999
Location: SNA, LAX
Programs: UA 1K, SPG Plat, Hertz P Circle
Posts: 1,628
UA on the web security issue?
Today while using the UA web site to check my account, I noticed that the home page sign on is NOT encrypted via SSL. This might be a security issue if someone captures the MP# and password.
I'm sending them an email regarding this, and meanwhile I'd recommend clicking on the link to MP summary and log in on the next page, which is via an SSL server.
I'm sending them an email regarding this, and meanwhile I'd recommend clicking on the link to MP summary and log in on the next page, which is via an SSL server.
Feb 12, 2000, 11:23 pm
#2
Join Date: Jan 1999
Location: Too many
Programs: Lots
Posts: 5,761
Not a security issue at all, the form is posting to a secure server.
<form method="POST" action="https://www.itn.net/cgi/ureg" name="MileagePlus">
The page you're entering information on doesn't have to be secure, just where the data is being posted to.
<form method="POST" action="https://www.itn.net/cgi/ureg" name="MileagePlus">
The page you're entering information on doesn't have to be secure, just where the data is being posted to.