News for hackers. Stuff that matters.

A comment on Securing your API: a modern alternative to CSRF tokens. Parent comment

Re:Securing your API: a modern alternative to CSRF tokens by baby on Wednesday June 14, 2017 @06:36AM (#14551784)
You're wrong. If you MITM the connection you can block that response and the token will be user over and over again allowing these attacks
[ Parent | on HN ]

There are no comments on this comment yet.