4 ms·
I expect web devs to know about a lot of security concepts, including SSL/TLS, subresource integrity, CORS, a variety of cross-site stuff, etc. It's simply dang
by twblalock 8y ago
I expect web devs to know about a lot of security concepts, including SSL/TLS, subresource integrity, CORS, a variety of cross-site stuff, etc. It's simply dangerous if they don't.
- y4mi 8y agoknowing about security concepts is quite a bit different to knowing the details about the currently established standard of encryption and its next iteration. We're talking about the changelog of TLS 1.2 to 1.3, not the general attack vectors for web applications.
- bsimpson 8y ago"web dev" is a big tent with room for many specializations underneath. Not everyone needs to know everything.