Re:Why Static Websites Need HTTPS
by mechanicalpulse on Tuesday August 28, 2018 @08:51AM
(#17858393)
Yes. https://en.m.wikipedia.org/wiki/Cross-origin_resource_sharin...
[ Parent
| on HN ]
Re:Why Static Websites Need HTTPS
by austincheney on Tuesday August 28, 2018 @02:54PM
(#17861732)
CSRF works the same whether the site is served via HTTP or HTTPS. CSRF attacks the server from the client, so HTTPS doesn't protect from this. HTTPS is an end-to-end encrypted tunnel.