Since I work in security at my work and have to protect their asset,

This is something that concerns me big time!!!


Since users are logging into your site over port 80, this method all information is transmitted in clear text ( http://), what keeps hackers from sniffing the address to obtain passwords of users?,

Should you be using port 443, this method all information is transmitted encrypted ( https://) for users ID and passwords since its link also to their ebay account?

Notice here:


http://www.auctionsniper.com/Default.aspx?signout=true

This message has been edited. Last edited by: ssrobzoom,