Less Post More GET

It isn’t just Ruby on Rails login forms that are broken. The majority of login forms on the internet are fundamentally broken.

In what appears to be some form of risk management strategy, these login forms introduce a different risk to the websites that use the default behaviors – in RoR sites, this is often either AuthLogic or RestfulAuthentication.

Both are broken in a big way.

(more…)