At a hotel currently. My habit on these crappy unencrypted wifi networks is to VPN to home, but the VPN timed out and a request was sent to SF in the clear. I was greeted by a concerning message:
This IP is only allowed to access our API.
To protect our users, we can't process requests from this IP address.
If you believe you have reached this page in error, contact us.
- How's that happen? Shady hotel wifi is shady, but does that mean there's been active abuse from this IP? And if there has been abuse, why are they still allowed to use the API?
- Since my session cookie was sent in the clear through a known abusive network, just to confirm: after logging out from that session, that cookie is immediately useless, right?
- And, since my session cookie was sent in the clear through a known abusive network, can I take this opportunity to wonder aloud what the status is on setting up SSL?