Re: Discussion of Mandatory TLS in HTTP/2.0

On 07/19/2012 03:10 PM, Phillip Hallam-Baker wrote:
> 
> My biggest Web security concern is not the risk of passwords being
> intercepted on the wire, its the fact that users have no practical
> alternative to using the same password for the 100+ sites they use
> that demand one.

Mine too, though we may have different solutions in our heads.

But, that's being addressed as part of the auth stuff which is a
different thread entirely (at a far lower temperature:-)

S