3 ms·
Bizarre. HTTPS isn't a guarantee that a site is not malicious. Its not like I could go to a CA and ask them who they signed that cert for and take on any kind
by revelation 12y ago
Bizarre. HTTPS isn't a guarantee that a site is not malicious. Its not like I could go to a CA and ask them who they signed that cert for and take on any kind of legal responsiveness. Such is the state of the CA system that they will give a cert to anyone with access to a domains MX and some bitcoins.
Instead of this, maybe require there's a user mouse event on the call stack for things like fullscreen.
- air 12y agoThe intent is to prevent man in the middle -attackers from getting access to those features.
- arcatek 12y agoWhy would they need the fullscreen access? I could see the interest for cookies or local storage, but fullscreen?
- carbocation 12y agoSo they can pretend to be your entire browser.