Comment by hedora

But this isn't added protection. Here is the textbook list of security goals:

- availability

- integrity

- confidentiality

It breaks availability and confidentiality to protect against an attack that is already prevented by https.

This is like installing an open ip cam and welding my padlock shut, then claiming you've improved my storage unit.