4 ms·
Doesn't make it better tough, a MITM could change the action URL of the form.
by Gurrewe 11y ago
Doesn't make it better tough, a MITM could change the action URL of the form.
- staticfish 11y agonot if it's pinned at the web app level.
- tyre 11y agoAgain, MITM. If you mean the front-end web (JS) app, MITM the request from the server to the client browser and replace the hardcoded submission url in the JS.
- staticfish 10y agoNot really. I used Play Framework which is also its own webserver. SSL is at both the app and webserver level.
- jgalt212 11y agoMITM requires a man in the middle. For the most part, a state level adversary is required for a generalized MITM attack.
- megabytemike 11y agoCome join my wifi network at the coffee shop :-D
- jgalt212 11y agoYes, but that's not a general MITM attack as the NSA has pulled off. Only the folks at that particular coffee shop are placed at risk from this particular adversary.