* Boris Zbarsky:

> Wait.  Why does the domain matter at all for non-SSL connections?
> It's not like we have any guarantees against MITM here...

Most users are not subject to MITM attacks, but they do receive all
kinds of URL lures.
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security

Reply via email to