Password Security Question

[Brit]

I have noticed a number of internet sites have the userid/password login screens on secure (https) pages while some sites have the login on a non-secure page that posts to a secure page. Is there a difference?

Does the browser encrypt all posts to secure pages even if the originating page is not secure?

Any help is appreciated.

 

[rewebb]

Although I've never tried it I seem to recall from my IIS training course that credentials for Basic Authentication were encrypted for a Secure web page. Remember though that you cannot use a virtual server with HTTPS - Host Headers are encrypted too and IIS cannot decrypt them to decide which virtual web site to send the page request to.