News for hackers. Stuff that matters.

A comment on API Shouldn't Redirect HTTP to HTTPS. Parent comment

Re:API Shouldn't Redirect HTTP to HTTPS by cqqxo4zV46cp on Tuesday May 28, 2024 @05:25PM (#40505780)
A HTTP website presents an opportunity for an attacker to MITM a payload that is ultimately executed in a user’s browser. Beyond ‘getting a moustache tattoo on your finger’ quirkiness, HTTP-only websites are really inexcusable beyond some very niche cases.
[ Parent | on HN ]
Re:API Shouldn't Redirect HTTP to HTTPS by sdsd on Tuesday May 28, 2024 @05:49PM (#40505982)
>Beyond ‘getting a moustache tattoo on your finger’ quirkiness

In that case, seems totally worth it. I, like moustache finger tattoos, am aggressively opposed to worrying about being perceived as cool. I will just have to live with being inexcusable.

[ Parent | on HN ]
Re:API Shouldn't Redirect HTTP to HTTPS by valec on Tuesday May 28, 2024 @06:02PM (#40506094)
not my problem!
[ Parent | on HN ]