canpolat to ProgrammingEnglish · 2 年前Your API Shouldn't Redirect HTTP to HTTPSjviide.iki.fiexternal-linkmessage-square13linkfedilinkarrow-up1111arrow-down14
arrow-up1107arrow-down1external-linkYour API Shouldn't Redirect HTTP to HTTPSjviide.iki.ficanpolat to ProgrammingEnglish · 2 年前message-square13linkfedilink
Invalidating creds sent over http is a great point!