5 ms·
If you're using a browser without certificate pinning wouldn't a MITM attack suffice? E.g. sslstrip
by csdrane 10y ago
If you're using a browser without certificate pinning wouldn't a MITM attack suffice? E.g. sslstrip
- airza 10y agogmail uses HSTS so sslstrip is unlikely.