4 ms·
Ability to mark HTTPS site as "not secure" using HTTP headers if it's asking for things like logins and passwords. Would be useful for things like free static
by kyledrake 9y ago
Ability to mark HTTPS site as "not secure" using HTTP headers if it's asking for things like logins and passwords.
Would be useful for things like free static HTML web hosts and CDNs for combating phishing.
Could be something put in CSP.
- krallja 9y agoIs that different from CSP form-action?
- kyledrake 9y agoYes. This wouldn't prevent a form from working, what it would do is warn the user that this site shouldn't be asking you for a password and may be trying to do a bad thing, instead of just showing a green bar and a "security lock" with the word secure on it.