How easy is it to sniff usernames/passwords on a website?
Firstly, I am not a "hacker" or anything like that. I'm just being paranoid.
I have set up a seperate (online, web-based) business which will contain lots of reasonably important customer information (although no payment/credit card type information.)
The customers log into the site using typical username/password textboxes. The login does NOT use https.
The administrators also use the same login system when logging in.
How easy would it be for someone to sniff the administrator username & password?
If possible, I'd like to try it myself.
Any information appreciated.
Thanks,
Steve
