Why can Access-Control-Allow-Origin not be '*' when using credentials?

Topic: misc, Frontend/Security. Level: Advanced.

The full answer to this question is available to Interview Reader members. See what is free and what Premium adds.