Replying to @slightlylate and @JonFerraiolo, @shepazu
Hiding the fact that the content was served from a different origin than advertised makes the problem worse, not better. Same violation of user expectation, even less visible.
♥ 5
Tweet · 27 Aug 2020, 22:19 UTC