4 ms·
But since top lev is insecure, an attacker could inject a legit looking form whose destination is set to steal passwords.
by tehlike 10y ago
But since top lev is insecure, an attacker could inject a legit looking form whose destination is set to steal passwords.
- joshstrange 10y agoI guess it depends on the attack this is supposed to stop. This change does prevent sniffing of passwords and protects them while in transit but no, it doesn't prevent MitM attacks. That said google plans on marking all HTTP pages as "Non-Secure" in the not-too-distant future which will help warn against the potential for MitM.