3 ms·
I'm a little surprised such a basic article has made it to frontpage of HN, and especially considering a number of omissions - such as that Cookies should be ma
by wepple 13y ago
I'm a little surprised such a basic article has made it to frontpage of HN, and especially considering a number of omissions - such as that Cookies should be marked with a 'secure' flag when using HTTPS, or that weak ciphers should be explicitly disabled.
There's no "we're ok, I switched security to ON" in the security world
- callahad 13y agoDid we read the same article? The `secure` flag is the fifth of the "Key Points" at the top of the article, and the entire penultimate section is devoted to it.