Thread: Enable SSL just for login

Hi, I saw ticket #1484764 a while ago.

I'd like to see this feature implemented, and I'll try to come up with a patch in a few days.

However, I'm not really sure if it's secure. RC seems to store the user's password in $_SESSION['password'], and it's decrypted whenever the password's needed. Is session data stored on the server or on the client's computer?