2 ms·

If an attacker is able to impersonate the server, then it is also able to ask the client for the password by modifying the Javascript sent.

• jedisct1 9y ago
  All clients are not web browsers, but sure.