3 ms·
So https and content security policy should be enough to mitigate this kind of stuff or am I wrong? If they would amend csp headers and inject stuff I would be
by ozim 11y ago
So https and content security policy should be enough to mitigate this kind of stuff or am I wrong?
If they would amend csp headers and inject stuff I would be worried but still there would be https for the rescue.
- profmonocle 11y agoYep, ISPs can't do stuff like this to HTTPS traffic. This is one reason some people are advocating HTTPS for all sites, not just sites containing sensitive data.