News for hackers. Stuff that matters.

A comment on Architecting Websites for the HTTP/2 Era. Parent comment

Re:Architecting Websites for the HTTP/2 Era by strommen on Tuesday May 12, 2015 @05:24PM (#9535002)
Yes and Yes (assuming your random key isn't guessable).

breachattack.com suggests masking the secret with a per-request random key, but masking the user input would work too.

[ Parent | on HN ]

There are no comments on this comment yet.