Geek Answers Handbook

Why is AJAX authentication over HTTP considered insecure?

Let's look at the following scenario: suppose I have a web application and user authentication is done through a modal dialog box (say that when a user clicks the login button, an ajax request is sent and depending on the callback, I either close the window or display error) and I use only HTTP protocol . Why is this considered an unsafe way to do something?

Also, make sure that the modal dialog box is considered, because this is vital information. Perhaps some data is displayed under the dialog box and may be available if the modality is broken.

The question includes both:

  • How can you break application security using ajax call?
  • Is Ajax HTTP less secure than the regular form of HTTP?
+5
source share
6 answers

The one who told you is wrong. Posting ajax via post is no less secure than posting with regular forms. Just because it's the same thing .

Update 1 according to the latest board:

  • You can not
  • No

: AJAX - HTTP-, (, , html). . .

, : ajax - HTTP-. , , SO SO.

: " , ". : A , A, A A: -S

+10

HTTPS. GET . POST HTTP-. Ajax . . , .

+2

HTTP , . (, Wi-Fi). Ajax HTTPS .

+1

, , http. , , . https, ajax , html.

Somy https, .

+1

HTTP HTTPS, AJAX , . , cookie, .. .

0

More articles:


All Articles