News for hackers. Stuff that matters.

A comment on Certificates for localhost. Parent comment

Re:Certificates for localhost by mholt on Thursday June 21, 2018 @01:38AM (#17362414)
I see your point. But in my book, that's still rogue software. And that's a terrible sandbox. :)
[ Parent | on HN ]
Re:Certificates for localhost by orf on Thursday June 21, 2018 @11:09AM (#17365828)
I see your point, but you're saying:

> Yeah, we don't trust just anything that comes in on that socket

Well, you are, you're trusting it came from a browser so the Origin header is correct, right?

[ Parent | on HN ]