SSL Strip

[ponury]

Here is thread for all people having questions about it.

• When it works?
  It works when an user logs in, it won't decrypt SSL on the fly. If the user is logged in without SSL then you could log in as him and logout, he will be logged out too.
  
  
• Will it work on GMail?
  No, I made it work only on facebook
  
• It disappears when I reopen the app
  Yes, and it have to be that way
  
  
• Credentials are not saved when the app is not active (e.g. when I'm in the browser)
  Yep, the app must be in active state to receive credentials
  
  
• I have multiple logins!
  If the user will log again the credentials will be appended to the previous, the same if he enters wrong password/email
  
  
• Can I save credentials for later
  No
  
  
• Will you make it show full password or available for other sites?
  No

[theidoctor]

Also, here is some info about what it is

http://en.wikipedia.org/wiki/Transport_Layer_Security