From a1e0dd52218c125a29637ef1af4e94be9e387a20 Mon Sep 17 00:00:00 2001 From: John-Mark Gurney Date: Mon, 19 Apr 2021 17:39:59 -0700 Subject: [PATCH] id's must be unique, misread guidence on sidenotes.. --- content/2017/09/adventures-in-autobahnwamp-security.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/content/2017/09/adventures-in-autobahnwamp-security.html b/content/2017/09/adventures-in-autobahnwamp-security.html index 60bebf6..f1c1a15 100644 --- a/content/2017/09/adventures-in-autobahnwamp-security.html +++ b/content/2017/09/adventures-in-autobahnwamp-security.html @@ -25,8 +25,8 @@ WAMP does not appear to have it's own encryption layer, but it does have it's own authentication layer. You really don't want to have to trust two different authentication layersThe encryption layer must be authenticated, otherwise +id="sn-encauth" class="margin-toggle"/>The +encryption layer must be authenticated, otherwise any attacker could MiTM the connection. Most uses of TLS make use of the CA system for authentication (which has serious issues in trust), and most web apps add their own authentication layer on top of it (not