Re: [SM-PLUGINS] SM access via SSL for entire session, versus just SSL for login

[Jon E. <je...@kr...>]

Alan in Toronto wrote:

> Is there any reason, performance or otherwise, why it would be better for me
> to use
> the Secure Login plugin, so that only the login is under SSL? Is there any
> reason
> why I should not continue to run the user's entire SM session under SSL?

My session, like yours, runs entirely under SSL.

Suppose you're at work, or an internet cafe or using some PC that's not yours
and where you can therefore not (reasonably) 100% trust its integrity 24x7. 
Do you want that unencrypted traffic being viewed by persons who should not
be viewing it?