2 Comments »Mike Germano of Carrot Creative posted a tweet earlier today that mentioned he was getting an SSL version of Facebook showing up. Why would Facebook need and SSL version of their site up and running? Technically they don’t currently but with the impending launch of the Facebook payment platform (which many are speculating will launch at f8), it makes sense that Facebook would be testing out their new payment platform.
Joshua Backer posted the following image of his Flock browser displaying the SSL version of Facebook:
So is it now official that Facebook is about to launch their payment platform? Not yet but it definitely is one little hint that the platform could be launching soon. Now all that’s left is an iPhone application platform for Facebook apps. Any chance that it will be released at the f8 event? Possibly. I’ve definitely been speculating about it so we’ll see what happens! Also thanks to Jason Beckerman who was in the room when this was found.  He would also love if you follow him on Twitter.
Hmm. Or maybe they just got wise, and decided to stop sending the session auth cookies around unencrypted?
Sites that don’t use https everywhere are prone to session hijacking. Sure, they encrypt your original password submission, but then they pass the resulting session tokens around in all subsequent requests unencrypted, meaning that your session can be hijacked by anyone else on the same open network, e.g. a public wi-fi.
Hmm. Or maybe they just got wise, and decided to stop sending the session auth cookies around unencrypted?
Sites that don’t use https everywhere are prone to session hijacking. Sure, they encrypt your original password submission, but then they pass the resulting session tokens around in all subsequent requests unencrypted, meaning that your session can be hijacked by anyone else on the same open network, e.g. a public wi-fi.