vendredi 8 septembre 2017

login details(id,password) visible in plain text in browser developer tools

I am particularly new to security in websites.The day before, I logged in to my college website via my roll number, password and a captcha code. When I opened the developer tools on Mozilla, I could see one Post request (my details) being sent over the network.

I studied in my college course that there are 2 ways to send these type of details to a server. One is via URL arguments and other is through the http parameters. I clicked on the parameter tab of this POST request and I see the my login details in plain text like this :

  • LoginId -
  • Password -
  • Captcha - .......

Does it mean that these details are being sent as it is? or these details are only visible to me? Forgive me if it's too lame.

Aucun commentaire:

Enregistrer un commentaire