4 ms·
Can you explain the attack vector where encrypted HTTPS network traffic is vulnerable but a JS API isn't?
by esprehn 5y ago
Can you explain the attack vector where encrypted HTTPS network traffic is vulnerable but a JS API isn't?
- theandrewbailey 5y agoYour browser opens an encrypted connection to somewhere you don't want it to (e.g. loads an image or iframe, JS not required). How many connections and resources does a normal web page load? 100? More? Almost nobody has time to audit all of them. Not technically inclined? You're screwed. My secondary concern is that there would be more traffic going around the internet that isn't being used 99+% of the time.