> No way to verify that what was loaded was secure or valid. Signed software fro... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

aaaaaaaaata on May 11, 2022 | parent | context | favorite | on: W3C Proposes the Creation of a WebView Community G...

> No way to verify that what was loaded was secure or valid.

Signed software from your VPN provider isn't enough?

What type of attack, theoretical or otherwise, are you avoiding?

johannes1234321 on May 11, 2022 [–]

An Oauth request loads an external website. A Network-Level attacker anywhere on the path might try to send the request elsewhere.

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact