3 ms·
That's the same as protecting just the login page with https. What prevents code outside the form page from replacing the link which goes to the form page?
by cesarb 9y ago
That's the same as protecting just the login page with https. What prevents code outside the form page from replacing the link which goes to the form page?
- martin-adams 9y agoExactly my thought. I guess that would mean it would need some intimate knowledge of the target site this reducing the scalability of the attack. But then again, thee are some clever people out there who could automate it.