Re:Monzo’s Response to Cloudbleed
by otabdeveloper on Friday February 24, 2017 @11:00AM
(#13724793)
Because the "HTTPS everywhere or you're a dinosaur and you don't deserve to live" hysteria forced everyone to put HTTPS even in places where it doesn't belong.
[ Parent
| on HN ]
I'm pretty sure "in front of the API for people's bank account" is exactly the place HTTPS belongs.
Re:Monzo’s Response to Cloudbleed
by scrollaway on Friday February 24, 2017 @12:35PM
(#13725701)
> put HTTPS even in places where it doesn't belong
Like an online banking app?