4 ms·
I still don't see your point. If your password manager autofills your credentials for `example.com` when you visit `evil.example.com` then the owner of `evil.e
by Ajedi32 8y ago
I still don't see your point.
If your password manager autofills your credentials for `example.com` when you visit `evil.example.com` then the owner of `evil.example.com` already has an easy way to steal your credentials regardless of whether or not this spec is implemented.