Re: IBM Community Tools ''Password in clear or crypted ?''

[Stephane Leon <StephaneLeon_ml@xxxxxxxxxx>]

Hello guys,

Yesterday i try to download Ibm community tools.
and for that i had to register.
When i fiiled the page i see https (ssl on 443)
and finished the registration.
But to log in is http.
So, my usrid and are in clear or crypted ?
I run tcpflow to see the flow, enter my usrid, pass and click Sign in  
on :
http://www-1.ibm.com/servers/eserver/iseries/nation/registration/ 
index.jsp
and i get

010.000.000.001.51763-032.097.212.154.00080: GET  
/servers/eserver/audience/login/iseries/nation/ 
index.jsp?uid=Stephane7&pwd=dVBYx9urSfv2CGR&Sign+in.x=62&Sign+in.y=10&th 
ispage=%2Fprofile%2Findex.jsp HTTP/1.0

Note :
My usrid is Stephane7
and my pass is dVBYx9urSfv2CGR

So WHY USE Https on registration  
(https://www-3.ibm.com/registration/selfreg) ?

But below here is :

Via: HTTP/1.1 www-1.ibm.com (IBM-PROXY-WTE)
Date: Fri, 21 Feb 2003 18:22:33 GMT
Server: IBM_HTTP_Server/1.3.12.6 Apache/1.3.12 (Unix)

*nix !!! nice :-)