Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Chrome 56 will mark HTTP pages with password fields as non-secure. Parent comment
The Web Origin Concept - https://tools.ietf.org/html/rfc6454
The also require the server to provide a list of Origins that are valid for the protocol, if the domain your logging into is not in the list, the challenge of the server will not be signed. Its called AppID in the protocol.
See: https://fidoalliance.org/download/
There are no comments on this comment yet.
The Web Origin Concept - https://tools.ietf.org/html/rfc6454
The also require the server to provide a list of Origins that are valid for the protocol, if the domain your logging into is not in the list, the challenge of the server will not be signed. Its called AppID in the protocol.
See: https://fidoalliance.org/download/