Page 1 of 1

Discussion: Login Post with plain text password

PostPosted:Fri Jan 13, 2012 9:14 am
by kevinchang
Hi jllort and pavila,

Sorry for bother again.
Firstly, thank you for you immediate response for each issue.
Then, I'd like to discuss Plain Text Password in Login Post.
Today, I used Httpwatch, and find that password is plain text in Login Post, whether it is not safe if we publish the site to Internet ?

Re: Discussion: Login Post with plain text password

PostPosted:Sun Jan 15, 2012 9:29 am
by jllort
You should configure https ( SSL ), the idea if configure apache server in your server, and then configure proxy to jboss. After it configure apache SSL to that virtual host. This kind of problem will be solved.