5 ms·
As other people have mentioned, HTTPS without HSTS still makes MitM a problem. And there are still other attacks possible on public wi-fi networks which don't
by mayniac 7y ago
As other people have mentioned, HTTPS without HSTS still makes MitM a problem.
And there are still other attacks possible on public wi-fi networks which don't involve MitM-ing HTTP(s) traffic. MitM DNS traffic and you can do nasty things: https://github.com/infobyte/evilgrade https://github.com/infobyte/evilgrade