• #indieweb 2016-08-26
  • Prev
    Next
  • #indieweb
  • #dev
  • #wordpress
  • #meta
  • #stream
  • #microformats
  • #known
  • #events
#indieweb ≡
  • ←
  • →
2016-08-26 UTC
# 16:45
aaronpk
it's true that without the https cert, indieauth.com *might* be MITM'd and the attacker could inject their own link on your home page. but that's a pretty far stretch because it requires MITM'ing the connection between indieauth.com and your server.