3 ms·
Yeah, even displaying a login form on a non-https page is a big hole for mitm attacks, but most of the web can't be bothered.
by danenania 14y ago
Yeah, even displaying a login form on a non-https page is a big hole for mitm attacks, but most of the web can't be bothered.
- delinka 14y agoEven displaying any page over non-HTTPS and linking to a login page is a big hole for MITM attacks. Who's to say the login page is really on the correct server? As long at the little lock looks green (does Joe Public even pay attention?), it's safe ... right?