| http://www.w3.org/ns/prov#value | - This gives an attacker an opertunity to hijack things before the user switches to https and keep the client on plain http as the connection from attacker to server switches to https.There is a new spec called http strict transport security which tries to mitig Re:
|
