<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Designs by Calvin Blog &#187; web forms</title>
	<atom:link href="http://designsbycalvin.com/blog/category/web-forms/feed/" rel="self" type="application/rss+xml" />
	<link>http://designsbycalvin.com/blog</link>
	<description>Maine based design blog and design info for non-profit organizations.</description>
	<pubDate>Tue, 02 Sep 2008 02:52:37 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
	<language>en</language>
			<item>
		<title>Is Twitter really submitting my password securely?</title>
		<link>http://designsbycalvin.com/blog/2008/07/is-twitter-really-submitting-my-password-securely/</link>
		<comments>http://designsbycalvin.com/blog/2008/07/is-twitter-really-submitting-my-password-securely/#comments</comments>
		<pubDate>Mon, 21 Jul 2008 04:35:26 +0000</pubDate>
		<dc:creator>Calvin</dc:creator>
		
		<category><![CDATA[web forms]]></category>

		<category><![CDATA[password]]></category>

		<category><![CDATA[submitting]]></category>

		<category><![CDATA[twitter]]></category>

		<category><![CDATA[unsecure]]></category>

		<guid isPermaLink="false">http://designsbycalvin.com/blog/?p=29</guid>
		<description><![CDATA[So I was signing up for a Twitter account today and noticed something. After choosing a username and password, I was taken to an invitation page. If you look at this picture it clearly states that my password will be submitted securely.

How? I noticed in my URL bar there was no https in front of [...]]]></description>
			<content:encoded><![CDATA[<p>So I was signing up for a <a href="http://www.twitter.com">Twitter account</a> today and noticed something. After choosing a username and password, I was taken to an <a href="http://www.twitter.com/invitations">invitation page</a>. If you look at this picture it clearly states that my password will be submitted securely.</p>
<p><a title="Click for larger image" href="http://www.designsbycalvin.com/blog/images/twitter1.jpg" target="_blank"><img class="alignnone" src="http://www.designsbycalvin.com/blog/images/twitter1.jpg" alt="Twitter Email Submit" width="623" height="321" /></a></p>
<p>How? I noticed in my URL bar there was no https in front of twitter.com, so I pulled up the source code to see if was being passed to an encrypted form. The form url was:</p>
<p id="note">&lt;<span class="start-tag">form</span><span class="attribute-name"> action</span>=<span class="attribute-value">&#8220;/invitations/fetch_contacts&#8221; </span><span class="attribute-name">method</span>=<span class="attribute-value">&#8220;post&#8221;</span>&gt;<br/></p>
<p>Can anyone explain how twitter is securely handling my email password if it is being submitted without (or to) a secure https connection?</p>



Share and Enjoy:


	<a rel="nofollow" href="http://digg.com/submit?phase=2&amp;url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Digg"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/digg.png" title="Digg" alt="Digg" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.designfloat.com/submit.php?url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Design Float"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/designfloat.gif" title="Design Float" alt="Design Float" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://del.icio.us/post?url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="del.icio.us"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/delicious.png" title="del.icio.us" alt="del.icio.us" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.facebook.com/sharer.php?u=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;t=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Facebook"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/facebook.png" title="Facebook" alt="Facebook" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.mixx.com/submit?page_url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Mixx"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/mixx.png" title="Mixx" alt="Mixx" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.google.com/bookmarks/mark?op=edit&amp;bkmk=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Google"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/googlebookmark.png" title="Google" alt="Google" class="sociable-hovers" /></a>
	<a rel="nofollow" href="mailto:?subject=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F&amp;body=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F" title="E-mail this story to a friend!"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/email_link.png" title="E-mail this story to a friend!" alt="E-mail this story to a friend!" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.furl.net/storeIt.jsp?u=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;t=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Furl"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/furl.png" title="Furl" alt="Furl" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.linkedin.com/shareArticle?mini=true&amp;url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F&amp;source=Designs+by+Calvin+Blog+Maine+based+design+blog+and+design+info+for+non-profit+organizations.&amp;summary=So%20I%20was%20signing%20up%20for%20a%20Twitter%20account%20today%20and%20noticed%20something.%20After%20choosing%20a%20username%20and%20password%2C%20I%20was%20taken%20to%20an%20invitation%20page.%20If%20you%20look%20at%20this%20picture%20it%20clearly%20states%20that%20my%20password%20will%20be%20submitted%20securely.%0D%0A%0D%0A%0D%0A%0D%0AHow%3F%20I" title="LinkedIn"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/linkedin.png" title="LinkedIn" alt="LinkedIn" class="sociable-hovers" /></a>
	<a rel="nofollow" href="javascript:window.print();" title="Print this article!"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/printer.png" title="Print this article!" alt="Print this article!" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://reddit.com/submit?url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="Reddit"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/reddit.png" title="Reddit" alt="Reddit" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://www.stumbleupon.com/submit?url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F&amp;title=Is%20Twitter%20really%20submitting%20my%20password%20securely%3F" title="StumbleUpon"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/stumbleupon.png" title="StumbleUpon" alt="StumbleUpon" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://technorati.com/faves?add=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F" title="Technorati"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/technorati.png" title="Technorati" alt="Technorati" class="sociable-hovers" /></a>
	<a rel="nofollow" href="http://twitthis.com/twit?url=http%3A%2F%2Fdesignsbycalvin.com%2Fblog%2F2008%2F07%2Fis-twitter-really-submitting-my-password-securely%2F" title="TwitThis"><img src="http://designsbycalvin.com/blog/wp-content/plugins/sociable/images/twitter.png" title="TwitThis" alt="TwitThis" class="sociable-hovers" /></a>


<br/><br/>]]></content:encoded>
			<wfw:commentRss>http://designsbycalvin.com/blog/2008/07/is-twitter-really-submitting-my-password-securely/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
