idp on port 80 only ?

Paul Hethmon paul.hethmon at clareitysecurity.com
Thu Apr 18 13:42:32 EDT 2013


On 4/18/13 1:30 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>>But I will chime in and say that I run most of mine on port 80. In the
>>real estate vertical, very few sites implement SSL, so my customers would
>>rather run on port 80 than answer phone calls and explain to their
>>members
>>why they get a security warning when going from an IdP on SSL to an
>>application that is not.
>
>Ok, but that's http://something:80, not https://something:80. Tom was

Missed that distinction, which I guess is the point in the phishing world.

Paul



More information about the dev mailing list