2 ms·
Even if you don't have :80 open, that doesn't mean there isn't a MITM that would accept the connection instead of you.
by JimDabell 10y ago
Even if you don't have :80 open, that doesn't mean there isn't a MITM that would accept the connection instead of you.
- willstrafach 10y agoAs long as https:// https:// prefix is used, this is not true, MITM cannot downgrade that.
- beaconstudios 10y agoplus a HSTS header for any type-in traffic.