[gatein-issues] [JBoss JIRA] Updated: (GTNPORTAL-1606) HTTPS protection of login and password changes

[Minh Hoang TO (JIRA)]

     [ https://issues.jboss.org/browse/GTNPORTAL-1606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Minh Hoang TO updated GTNPORTAL-1606:
-------------------------------------

    Labels: portal-s49 worked  (was: portal-s49)


> HTTPS protection of login and password changes
> ----------------------------------------------
>
>                 Key: GTNPORTAL-1606
>                 URL: https://issues.jboss.org/browse/GTNPORTAL-1606
>             Project: GateIn Portal
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>    Affects Versions: 3.1.0-GA
>            Reporter: Bill Elliot
>            Assignee: Minh Hoang TO
>              Labels: portal-s49, worked
>   Original Estimate: 1 day
>          Time Spent: 6 hours
>  Remaining Estimate: 2 hours
>
> It is good security practice to use HTTPS when having the user enter any sensitive information like passwords. Can we have the portal modified so that the login and password change screens are placed into HTTPS mode, if HTTPS has been configured. Personally I would not be using a site that does not use HTTPS for login.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira