4 ms·
How is the possibility of XSS worse than the status quo (plaintext)? Thats like saying SSL is useless on desktop because root kits and keyloggers exist on deskt
by aianus 10y ago
How is the possibility of XSS worse than the status quo (plaintext)? Thats like saying SSL is useless on desktop because root kits and keyloggers exist on desktop.
- WorldMaker 10y agoA false sense of security can be more damaging than no sense of security. Certainly it can be important to know when you have a "no compromises" security option versus "mostly better than plaintext but maybe not secure". It could be a UX judgment to not confuse users they have a "secure connection" when in fact they might not. Look at all the various attempts over the years browsers have made to keep the UX semi-reliable and easy for users to understand whether or not their SSL connection is secure.