3 ms·
That really doesn't provide any security advantage over just using http. The point of https is to prevent mitm and in this case there's nothing preventing someb
by ptomato 14y ago
That really doesn't provide any security advantage over just using http. The point of https is to prevent mitm and in this case there's nothing preventing somebody from mitming the original http connection and redirecting to an evil https site.
- singlow 14y agoIt could only allow redirect to the same domain and complain if a cert check failed.