4 ms·
If you are connecting over TLS, the server is already trusted and I see no reason to validate the response. The theory may be the ability to tamper the response
by niros_valtos 5y ago
If you are connecting over TLS, the server is already trusted and I see no reason to validate the response.
The theory may be the ability to tamper the response before it hits your code (such as in SDK), but even then a malicious SDK can make everything look legit.