Odd web security question

[JackTheTripper]

on a site like www.bofa.com where they have a sign on box for their online system is it secure even though the page is not an https?

[Pat Logsdon]

They say it is:

When you sign in to Online Banking from the Bank of America home page, your ID and Passcode are sent over the Internet from your computer to ours using Secure Socket Layer (SSL) technology. SSL encrypts your personal information before it leaves your computer, ensuring that no one else can read it.
Click the lock icon above the sign in boxes to read all of the text.

[JackTheTripper]

Thank you for not belittling me. It's been a long week. I honestly looked for somethign like that and completely did not see that.

[OSUKid7]

Yep, and if you select your state and click through a few pages, it will send you to a https page. For me, in Ohio, that's https://onlineid.bankofamerica.com/cgi-bin/sso.login.controller?state=OH.

[GoldKey]

Also, if the page has frames, the login box might be in a SSL secured frame, but you won't get the lock icon in the lower corner. You need to get the properties of that specific frame.