CSRF works the same whether the site is served via HTTP or HTTPS. CSRF attacks t...

austincheney on Aug 28, 2018 | parent | context | favorite | on: Why Static Websites Need HTTPS

CSRF works the same whether the site is served via HTTP or HTTPS. CSRF attacks the server from the client, so HTTPS doesn't protect from this. HTTPS is an end-to-end encrypted tunnel.