Users are the most valuable asset, yet, so many iPhone app's don't take advantage of HTTPS, leaving users totally exposed. I've been analyzing some of my favorite iPhone app's lately, and have walked away stunned at how many send my password in plain text and leave me open to session hijacking.

This is how I fixed that problem, step-by-step...

Read the rest of this post »