4 ms·
Even if it's conceptually simpler, it still suffers from the same issues in my comment
by bastawhiz 5y ago
Even if it's conceptually simpler, it still suffers from the same issues in my comment
- GoblinSlayer 5y agoIf you mean login without javascript, that can't be helped. If you mean password slurped from DOM, you can't possibly make it worse.
- bastawhiz 5y agoConceptually there's no reason this couldn't be implemented by the browser with a new password element and a protocol built on top of HTTPS.
- GoblinSlayer 5y agoFWIW there's an experimental RFC 7804, but I don't know if any browser implemented it.