Your unencrypted (or just unauthenticated) HTML page might suddenly start sendin... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

iancarroll on June 14, 2017 | parent | context | favorite | on: Show HN: Password-protect a static HTML page

Your unencrypted (or just unauthenticated) HTML page might suddenly start sending the password you enter elsewhere...

pdx on June 14, 2017 [–]

Really, how? Because somebody compromised the server? So what? If they did that, all bets are off.

dpark on June 14, 2017 | [–]

No, because someone MITMs your insecure channel and serves you a malicious page that steals your password and the unencrypted data.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact