> It's still a security risk. MITM happens regularly. Then it's more or less as ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ori_b on July 10, 2019 \| parent \| context \| favorite \| on: Living without the modern browser > It's still a security risk. MITM happens regularly. Then it's more or less as broken as alternative authentication methods

groby_b on July 10, 2019 [–]

Nope. Because other methods never transmit a password in cleartext. (And they especially don't transmit it with every single request)

c22 on July 11, 2019 | [–]

How do they manage this feat over unencrypted stateless http? Surely they must transmit something with every request?

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact