RE: [OT] Urgent question about https

[Tony Lucas <tony@xxxxxxxxxxxxxx>]

> -----Original Message-----
> From: Keith Doxey [mailto:ukha@xxxxxxx]
> Sent: 17 December 2004 09:20
> To: UKHA Discussion
> Subject: [ukha_d] [OT] Urgent question about https
>
>
>
> Hi All,
>
> sorry for the OT.
>
> Just a quick question about secure web pages https
>
> Is the URL encrypted as well as the content ?
>
> I ordered a Christmas pressie for SWMBO last night and the
> order form was secure but the form was submitted by GET
> instead of POST which menat that all my details were visible
> in the address bar :-(
>
> I am going to the bank this morning to get the card changed
> and I am going to fire off a strongly worded email to both
> the web designers and the MD of the company once I find out
> their email addresses. I dont think my card has been
> compromised but I am not taking any chances.
>

Keith,

As far as the connection to the webserver is concerned, the entire
request is secure, albeit its possible that data is stored in their
webserver logs (but unlikely).  Besides which, if someone was to get
access to their webserver logs, the entire site would probably be
breached anyway.

The very first part of the connection establishes the secure connection
between the browser and the webserver.

Hope this helps :)

Regards,

Tony.