<?xml version="1.0" encoding="UTF-8" ?><rss version="2.0"><channel><title>&quot;Ways to secure a website without https/tls stuff?&quot; | Forum Topic | SpaceHey</title><link>https://blog.spacehey.com</link><description>Forum Topic created by delicious2003</description><item><title>Reply by &quot;delicious2003&quot;</title><link>https://forum.spacehey.com/reply?id=467805</link><guid>https://forum.spacehey.com/reply?id=467805</guid><description>The idea of encrypting the password with RSA keys is really interesting, but don&#039;t know if it would work for machines with Windows 9x systems. I was also thinking on another posibility, what if I encrypt the data with base64 using js in the client? My idea is implement ways to protect popular browsers released between 2007 and today. Another thing could be to allow http and https, and don&#039;t force ...</description><pubDate>Sat, 10 Jun 2023 07:42:54 +0000</pubDate></item><item><title>Reply by &quot;Mi cara&quot;</title><link>https://forum.spacehey.com/reply?id=459463</link><guid>https://forum.spacehey.com/reply?id=459463</guid><description>So this is a suuuuper old post but I&#039;m new here and I see you&#039;re still semi active so I&#039;ll respond. If you&#039;re using http without https, at the end of the day you anyone that catches the traffic WILL be able to see the passwords and such credentials you send over, so strong credentials and 2FA won&#039;t help much if an attacker can intercept the data and use it themselves. What I could think of is this...</description><pubDate>Tue, 30 May 2023 01:40:50 +0000</pubDate></item></channel></rss>