Re:HTTPS Deployment Growing by Leaps and Bounds
by yardie on Friday December 23, 2016 @11:33AM
(#13245576)
How will this work with hotspot capture portals? I have a dwindling list of sites I can use to check and see if my internet connection is down or just interrupted. And Apple/Microsoft don't always register the wifi is in captured so either I wait or I can open a browser to an unencrypted site and renew the session.
[ Parent
| on HN ]
Re:HTTPS Deployment Growing by Leaps and Bounds
by lol768 on Friday December 23, 2016 @12:46PM
(#13246046)
The only reason those captive portals don't work is because the operators decided to use the huge hack of a solution that is MitM'ing unencrypted HTTP traffic and/or messing with DNS instead of working to ensure a standardised solution (such as RFC 7710) was available before rolling out this sort of technology. The current approach really is a joke.
To be honest, I'm glad it's now back-firing with more sites using HTTPS (that they can't hijack connections to), maybe this will nudge the operators into doing things properly - whether that's using WPA Enterprise for username/password auth or using the DHCP option to tell new clients they need to visit an internal URL first to use the internet (no connection hijacking required).
Re:HTTPS Deployment Growing by Leaps and Bounds
by irishsultan on Friday December 23, 2016 @11:34AM
(#13245584)
That's what http://neverssl.com/ is for.
Re:HTTPS Deployment Growing by Leaps and Bounds
by yardie on Friday December 23, 2016 @12:04PM
(#13245796)
Now that is a handy link to have! Wish I knew of it sooner.
Re:HTTPS Deployment Growing by Leaps and Bounds
by diafygi on Friday December 23, 2016 @01:34PM
(#13246411)
I use example.com, which has all the scenarios without redirects.