3 ms·
Oh the other hand, maybe it should apply, considering that the website is the entry point for the user to the service and that an attacker owning that can trivi
by Nextgrid 4y ago
Oh the other hand, maybe it should apply, considering that the website is the entry point for the user to the service and that an attacker owning that can trivially redirect the user flow - the same reason why mixed HTTP & HTTPS is considered insecure.