|
|
|
|
|
by cryptonector
749 days ago
|
|
Well, nothing you do on the server side will protect a client willing to use http: when an MITM is present: the client can still connect to the MITIM, give away its credentials, and your server won't know. Still, I agree that this is a very good way to teach your users to not start with http:! And that this is what one should do. |
|