News for hackers. Stuff that matters.

A comment on Login Forms Over HTTPS, Please. Parent comment

Re:Login Forms Over HTTPS, Please by hwdsl2 on Friday January 29, 2016 @03:25PM (#10998215)
They could. But how would they show the users their desired contents after login?
[ Parent | on HN ]
Re:Login Forms Over HTTPS, Please by notatoad on Friday January 29, 2016 @03:40PM (#10998319)
Doesn't matter, they've already gotten your password at that point. They can just say "login failed" and redirect you to the real login page
[ Parent | on HN ]