News for hackers. Stuff that matters.

A comment on Living without the modern browser. Parent comment

Re:Living without the modern browser by ori_b on Wednesday July 10, 2019 @02:57PM (#20405197)
> It's still a security risk. MITM happens regularly.

Then it's more or less as broken as alternative authentication methods

[ Parent | on HN ]
Re:Living without the modern browser by groby_b on Wednesday July 10, 2019 @04:34PM (#20406244)
Nope. Because other methods never transmit a password in cleartext. (And they especially don't transmit it with every single request)
[ Parent | on HN ]
Re:Living without the modern browser by c22 on Wednesday July 10, 2019 @09:45PM (#20408439)
How do they manage this feat over unencrypted stateless http? Surely they must transmit something with every request?
[ Parent | on HN ]