Aiyumei Resident Since primfeed does use HTTPS, I doubt it matters that much
Aiyumei Resident
•
Jul 8, 2024
Rizz Reaper There are plenty of tools that allow you to intercept https requests. I use some of them on daily basis. It's better to have it raised than turn it into security problem.
Log in to comment and vote
Comments5
Jul 9, 2024
Hi, this parameter is used to show the follow button, and will be false if you're looking at your own profile.
Rizz Reaper
Jul 8, 2024
Since you're looking into it, I also noticed that passwords are sent in plain text in the json body when logging in
Aiyumei Resident
Jul 8, 2024
Rizz Reaper Can you please include it here as I already raised several security related concerns https://feedback.primfeed.com/bug-reports/p/security-sensitive-user-information-displayed-api-response-requests
Rizz Reaper
Jul 8, 2024
Aiyumei Resident Since primfeed does use HTTPS, I doubt it matters that much
Aiyumei Resident
Jul 8, 2024
Rizz Reaper There are plenty of tools that allow you to intercept https requests. I use some of them on daily basis. It's better to have it raised than turn it into security problem.