4 ms·
You as the user can't tell if the webview is using the HTTPS protocol to request data. You don't have to be a target of the NSA to care about this. If you're at
by leokun 13y ago
You as the user can't tell if the webview is using the HTTPS protocol to request data. You don't have to be a target of the NSA to care about this. If you're at a wifi hotspot with your mobile phone, like at the airport, you can see the clear text requests others on the wifi network are making.
You can see what a form posts to when you submit it in the URL. Browsers will warn you when there is non HTTPS data loaded on an HTTPS page.
- chc 13y agoAre native app forms any better in this regard?
- hodgesmr 13y agoAt least native app forms don't look so much like the authentic website. Harder to phish, but still possible I suppose.
- plorkyeran 13y agoThey're no more secure, but from a certain perspective they're more honest. I suspect there's a decent number of users that will never consider that the app could trivially get their password if the login screen looks like the website's login screen, but would if it looks like the app.