Hacker News new | ask | show | jobs
by BeniBoy 1417 days ago
If the service you are proxying offers authentication based on token within cookies, does that mean that you will have access to tokens hosted on the client side? Should you disclose a potential security risk to them (same for credentials interception)?