Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
OrangeTux
on Nov 29, 2016
|
parent
|
context
|
favorite
| on:
Logojoy: AI-powered logo creator
Their is a login form on the website on a page without HTTPS. You should change that.
binarnosp
on Nov 29, 2016
[–]
Also, no HTTPS when you are supposed to enter the credit card details. This stopped me from buying the logo.
devgutt
on Nov 30, 2016
|
parent
[–]
Actually it is an iframe with https (using stripe)
chairmankaga
on Nov 30, 2016
|
root
|
parent
[–]
But if the host traffic is compromised you can serve malicious payment gateways/forms.
sulam
on Nov 30, 2016
|
root
|
parent
[–]
If the host is compromised HTTPS isn't going to save you.
novocaine
on Nov 30, 2016
|
root
|
parent
[–]
it will if it's the host /traffic/ that is compromised
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
