log in to web-app through less secure website [on hold]
- by martijnve
We are worried about the security of our website containing the login-button to our saas-application.
Security measures put in place for our application won't do us much good if the website is hacked. The login button could be redirected to some malicious copy of our app.
The product website is maintained by people outside the dev team. Those people are not too knowledgable concerning security.
We (dev-team) could mantain the website ourselves but that would be a large burden on our small team.
How is this usually handled?