Does HTTP login to Sage Notebook send plaintex password?
Does my web-browser send the login and password in plaintext when I login to Sage Notebook via HTTP protocol?
Does my web-browser send the login and password in plaintext when I login to Sage Notebook via HTTP protocol?
If your question is about sagenb.org website, then yes, the password is sent in plain text. You can see it by looking at the source of the page, the login form is as follows <input type="password" name="password" size="15" />
which corresponds to plain text submission (the passwod type only ensures that the password will not appear on the browser's screen, that will show stars instead of letters). If you are not convinced, you can install WIreshark and see contents of the HTTP connections, this is instructive.
If your question is about a Sage notebook you can launch from, it depends. If notebook()
is called as is, then again the password is sent in plain text. If the notebook is called with the secure
option set to True
, then the connection is encrypted via SSL (HTTPS protocol) and your password does not travel in plain text.
Please start posting anonymously - your entry will be published after you log in or create a new account.
Asked: 2014-07-01 18:55:16 +0100
Seen: 564 times
Last updated: Jul 03 '14
notebook server daemon + security issues
Notebook List Object Data Storage/Retrieval? (Start/Restart)
Short Cython Example In A Notebook Cell?
What happens in insecure mode?
Is notebook() mutually-exclusive from "./sage -gdb" mode?
Can I pause a computation rather than aborting it? (Interrupt Command)
What state is preserved when I close a running notebook browser window?