LocalTapiola: Cleartext protocol after bank authentication (yrityspalvelu.tapiola.fi)
Issue The reporter found a redirect from https-http-https in the late stages of the authentication process. Fix The issue was fixed. Reasoning Although no authentication information was leaked, session related data could in theory also leak at this stage of the authentication process, hence a...