logoalt Hacker News

vluftyesterday at 11:41 AM0 repliesview on HN

if an attacker is in the position to try to MITM TLS, they're in the position to just serve whatever they want on port 80 even if your server isn't doing that.