3 ms·
CSRF has nothing much to due with wifi in particular, unless an HTTPS page is loading HTTP content, and a DNS hijacker is MITMing HTTP content.
by gohrt 13y ago
CSRF has nothing much to due with wifi in particular, unless an HTTPS page is loading HTTP content, and a DNS hijacker is MITMing HTTP content.
- mike-cardwell 13y agoIf your site has a CSRF flaw, then a CSRF attack can be launched against it by a MITM as soon as you access any other HTTP site. So it's best to use a trusted network if the HTTPS site you're accessing has CSRF flaws. That was my point.