I checked with Fiddler and it's client side only - no outgoing traffic back to a... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

arethuza on Sept 13, 2010 | parent | context | favorite | on: Password Reuse

I checked with Fiddler and it's client side only - no outgoing traffic back to a server!

Still, I don't think this is a great idea. You could harvest a lot of passwords with a page like this.

nodata on Sept 13, 2010 [–]

But it doesn't matter if it's client side only:

* It might not be in future

* It's not using SSL, so anybody in between can make it stop being client side only whenever they like

* It's a terrible, terrible idea to teach users to trust things like this.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact