Hacker News new | ask | show | jobs
by willstrafach 3331 days ago
As long as https:// prefix is used, this is not true, MITM cannot downgrade that.
1 comments

plus a HSTS header for any type-in traffic.