News for hackers. Stuff that matters.

A comment on Chrome is warning users about insecure pages. Parent comment

Re:Chrome is warning users about insecure pages by pdpi on Friday September 02, 2016 @12:52PM (#12414393)
As I understand it, he's suggesting that HTTP should incorporate something equivalent to STARTTLS as seen in some form in IMAP, POP3, FTP, LDAP, Postgres, and probably several others I'm forgrttingg
[ Parent | on HN ]
Re:Chrome is warning users about insecure pages by marcosdumay on Friday September 02, 2016 @01:15PM (#12414564)
Well, that gave really bad results in SMTP IMAP, POP3, and LDAP. Postgres just does not suffer much because the client always knows wether to upgrade the connection or not.

Ideally, we should be using DANE or some other kind of signed broadcasted info. Telling the user what happened is just a very good workaround (that will stay useful even if we change to DANE).

[ Parent | on HN ]
Re:Chrome is warning users about insecure pages by tho9Ohx1eo on Saturday September 03, 2016 @04:36AM (#12418345)
What bad results in IMAP or SMTP? In my experience this works as advertised.
[ Parent | on HN ]