2 ms·
CSRF protection should be implemented even if your entire site is protected by SSL. Also, I didn't say "just as dangerous", I said "just dangerous"
by mike-cardwell 16y ago
CSRF protection should be implemented even if your entire site is protected by SSL.
Also, I didn't say "just as dangerous", I said "just dangerous"
- al_james 16y agoSorry for misquoting you. However, with proper CSRF protection your man in the middle argument is not the case is it?