title: using https instead http prevents CSRF
body: <p>If we use https instead http, it should prevent CSRF attacks - right? Google only says how to prevent CSRF on application level(( But no articles for https connections(</p>