undefined | Better HN

0 pointsLargeTomato2y ago0 comments

My android phone was redirected to an https endpoint.

0 comments

1 comments · 1 top-level

If the first request is plaintext, the request can be intercepted before you ever get the redirect, inserting a trojanised login page instead.

j / k navigate · click thread line to collapse