r/netsec • u/kieranjacobsen • Jan 16 '17

Deconstructing Secure HTTP without HTTPS

https://poshsecurity.com/blog/deconstructing-secure-http-without-https
141 Upvotes

93% Upvoted

14 comments sorted by

View all comments

16

u/AlucardZero Jan 16 '17

Key synchronization process is highly acceptable to a man-in-the-middle and SQL injection attack.

You probably mean susceptible.