Are website passwords secure in Vista?

I have Vista Ultimate and have not setup BitLocker, are the passwords for
websites (such as online bill pay) protected?

If a website was secure under XP or IE6 it will continue to be secure in IE7
or Vista. If not, then upgrading to Vista or IE7 won't make it secure.
This is something that's done on the Web server and the OS or browser have
nothing to do with it.

--
Richard G. Harper [MVP Shell/User] rgharper@gmail.com
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


"Marvin" <Marvin@discussions.microsoft.com> wrote in message
news:52092148-1B5E-4CEA-9279-51937DA811E9@microsoft.com...

>I have Vista Ultimate and have not setup BitLocker, are the passwords for
> websites (such as online bill pay) protected?

"Richard G. Harper" <rgharper@email.com> wrote in message
news:22921742-45CE-45E2-A501-35230C3AC712@microsoft.com...

> If a website was secure under XP or IE6 it will continue to be secure in
> IE7 or Vista. If not, then upgrading to Vista or IE7 won't make it
> secure. This is something that's done on the Web server and the OS or
> browser have nothing to do with it.

I assume the original poster is talking about the facility to save your
passwords for various sites locally.

If so, the answer I'd give the OP is
Yes, but it's debatable how effective this security is when you don't
password protect your account or pick a weak password. In short, once
someone has physical access to your computer without your knowledge and
control then it's game over, just a question of when that becomes apparent.

"Robert Moir" <usenet@REMOVE2EMAILrobertmoir.com> wrote in message
news:OtBe5eK6HHA.600@TK2MSFTNGP05.phx.gbl...

>
> "Richard G. Harper" <rgharper@email.com> wrote in message
> news:22921742-45CE-45E2-A501-35230C3AC712@microsoft.com...

>
> I assume the original poster is talking about the facility to save your
> passwords for various sites locally.
>
> If so, the answer I'd give the OP is
> Yes, but it's debatable how effective this security is when you don't
> password protect your account or pick a weak password. In short, once
> someone has physical access to your computer without your knowledge and
> control then it's game over, just a question of when that becomes
> apparent.
>

Any Web site that is concerned about user-id and psw security, like a bank
or other such institution, do not allow the user the ability to save such
information with a browser to the computer. Yes, some Web sites allow the
saving of such information to the computer, but a site that is really
concerned about a user's credentials will not allow the credentials to logon
to the site to be saved to the computer.

In addition to this, a site will start asking other questions of the user to
verify credentials once the site is accessed if the user is in an area of
the Web site that is concern with *just who are you*.

That doesn't mean that a user can get something in an email asking to give
up the information, and the user does it. If that happens, then it's really
over. ;-)