Hacker News new | ask | show | jobs
by iancarroll 3297 days ago
Your unencrypted (or just unauthenticated) HTML page might suddenly start sending the password you enter elsewhere...
1 comments
pdx 3297 days ago
Really, how? Because somebody compromised the server? So what? If they did that, all bets are off.
link
dpark 3297 days ago
No, because someone MITMs your insecure channel and serves you a malicious page that steals your password and the unencrypted data.
link