You're both just choosing different places to draw the line between *developer r... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

tshaddox on March 31, 2012 | parent | context | favorite | on: #1 CSRF Is A Vulnerability In All Browsers

You're both just choosing different places to draw the line between developer responsibility and browser responsibility.

tptacek on March 31, 2012 [–]

That is like saying "you're both just suggesting two totally different designs for the HTTP security model".

His model is wrong. Again: I assume he wants to know that, so, bluntness.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact