News for hackers. Stuff that matters.

A comment on Chrome is warning users about insecure pages. Parent comment

Re:Chrome is warning users about insecure pages by thedufer on Friday September 02, 2016 @05:54PM (#12416556)
Am I missing something, or is this suggestion trivially mitm-able? If you fail to forward the request the upgrade, neither side will know something is missing.
[ Parent | on HN ]
Re:Chrome is warning users about insecure pages by spb on Friday September 02, 2016 @06:58PM (#12416846)
I think you're missing the part where a non-upgraded connection will be treated by the client as insecure and untrustable.
[ Parent | on HN ]
Re:Chrome is warning users about insecure pages by thedufer on Saturday September 03, 2016 @11:12AM (#12419471)
So the suggestion is that in 1994 (when the https protocol was introduced) we should have put big scary warnings on every non-ssl site? I don't see how that could've gone well. It's now 22 years later and people still aren't ready for that.
[ Parent | on HN ]