Talking about html forms, does the html obfuscation really works?
Some post on SO says it’s really a loss of time, because a talented “hacker” will always find the way to access your form fields (ex. associating Labels to inputs).
Has anybody implemented obfuscation and actually suffered an attack?
I would like to have your opinion about this subject.
Thank’s in advance.
Obfuscation can’t prevent any hacking, at it’s best it’s slowing down the process.
Especially with forms – the attacker can just take a look into his webconsole, examine your requests and then forge his own request accordingly.
The only real secure method is checking every incoming request serverside, since your server (hopefully) can’t be compromised.
Thus, obfuscating HTML just proves that the author “is a noob” for trusting such a method.