3 ms·
That is a very nice little enhancement though. If the app trusts the cache headers, this widens the scope from "your use of this app is compromised while on the
by ZoFreX 13y ago
That is a very nice little enhancement though. If the app trusts the cache headers, this widens the scope from "your use of this app is compromised while on the rogue AP" to "your use of this app is compromised wherever you connect from once you've used it on this rogue AP". That's a non-trivial difference!
- exodust 13y agoI agree it sounds like a non-trivial difference. An app could present new information over time, to fool the user into clicking on an external link in the app. The victim is now on the attacker's website, which suits the attacker more than trying to manipulate the app.