Re:Progress Towards 100% HTTPS, June 2016
by chongli on Wednesday June 22, 2016 @03:12PM
(#11956243)
Why should I trust you even if you have an HTTPS cert? All you needed to get one was a domain name.
[ Parent
| on HN ]
Re:Progress Towards 100% HTTPS, June 2016
by ssalazar on Wednesday June 22, 2016 @07:19PM
(#11957821)
People seem to be misinterpreting the intent of HTTPS; it doesn't give you any reason to trust a given site. HTTPS only verifies that the site you are talking to is in fact the domain name in the URL, rather than a government agency, ISP snooper/intermediary, or other man-in-the-middle attacker. Its up to you whether you trust the operator of that domain.