Hacker News new | past | comments | ask | show | jobs | submit login

Facebook does appear to use SSL. If you look at the login form, they are submitting to: https://login.facebook.com/login.php?login_attempt=1



Which means next to nothing if the page with the login form isn't encrypted. A man in the middle attack would just replace the Facebook login page, and the user would likely never notice.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: