The NSA doesn’t usually publish design guidance on a protocol that’s barely 18 months old. It did for MCP, naming eight specific risk categories. Here’s what the two CVEs show, what OWASP already has a name for, and what a real internet scan found.
Choose which categories you allow. You can change this at any time.
Required for the site to function: security, session handling and storing your cookie choices. These cannot be switched off.
Help us understand how visitors use the site so we can improve it.
Used to measure campaigns and show relevant advertising on other platforms.
ID: