Hacker News new | ask | show | jobs
by getsat 5619 days ago
This is why any page that lets you login to a site must also be accessible over HTTPS-only.
1 comments
staktrace 5618 days ago
Or any page that points to a page that lets you log in to a site must be accessible over HTTPS-only. Or any page that points to a page that points to a page... you get the idea. SSL everything, or you lose.
link