News for hackers. Stuff that matters.

A comment on You can’t buy Congress’s web history – that's not how any of this works. Parent comment

Re:You can’t buy Congress’s web history – that's not how any... by tedunangst on Thursday March 30, 2017 @02:00AM (#13993267)
Why are important people searching google without https?
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by daenney on Thursday March 30, 2017 @04:26AM (#13993766)
Important doesn't equal or imply smart nor being good at what you do.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by AnkhMorporkian on Thursday March 30, 2017 @06:53AM (#13994316)
They aren't. Google upgrades to HTTPS automatically, and the old method of overriding the DNS to an unsecured Google server stopped working years ago. Same with Bing, Yahoo, DDG, etc. No SSL, no search in today's world.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by hexadec0079 on Thursday March 30, 2017 @08:33AM (#13994784)
HTTPS will not protect the URL of the request, just the contents though.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by temprature on Thursday March 30, 2017 @09:54AM (#13995334)
This is wrong. The domain name is revealed through SNI but the path of the URL is sent as part of the encrypted HTTP request.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by UncleMeat on Thursday March 30, 2017 @05:10PM (#13998885)
HTTPS protects URL parameters. That stuff doesn't go to the DNS request.
[ Parent | on HN ]