Hacker News new | ask | show | jobs
by dkubb 5200 days ago
I don't think anyone is advocating this kind of development. In general you can't trust anything the client tells you, so to release information to a client that has not provided proper authentication credentials to the server is a mistake.