Is it possible to login to EE using SSL? Is it true that the username and password are not encrypted during login? I’m trying to determine how secure the EE login actually is.
Thanks!
This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.
The active forums are here.
October 16, 2009 1:29pm
Subscribe [4]#1 / Oct 16, 2009 1:29pm
Is it possible to login to EE using SSL? Is it true that the username and password are not encrypted during login? I’m trying to determine how secure the EE login actually is.
Thanks!
#2 / Oct 16, 2009 7:57pm
I have not done it but…isn’t setting up system pref. to use https:// by itself securing any form/data submitted? Passwords are stored encrypted as is in MySQL…
#3 / Oct 16, 2009 8:26pm
#4 / Oct 16, 2009 10:22pm
Is it possible to login to EE using SSL? Is it true that the username and password are not encrypted during login? I’m trying to determine how secure the EE login actually is.
I’ve done that a few times, though not recently, and every server configuration can be a bit different, but it should be nothing more than setting up your server to handle SSL for a specific site. After that, point to your login via https://mysite.com/login (or whatever) and the login should be secure. If you set up a separate directory you can also add a secure login ID and password.
It’s both security through SSL and obscurity.