[ic] Forms action question

[Dan Browning]

At 10:48 AM 7/3/2002 -0700, you wrote:
>Also, why is the form action "[process secure=1]" sometimes used instead 
>of "[process]"?  Wouldn't the AlwaysSecure pages take care of processing 
>that page securely?

Yes.

>In other words, if I want the information on the login page to be 
>processes securely, wouldn't adding login to AwaysSecure take care of that?

Yes.

>Why is secure=1 necessary?

So that if the user calls the page directly (by manually typing the in the 
URL), or someone else links to it and forgets the https://, then 
AlwaysSecure will *still* secure the page.

+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| Dan Browning, Kavod Technologies <db@kavod.com>
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Celebrate Hannibal Day this year.  Take an elephant to lunch.