News for hackers. Stuff that matters.

A comment on HTTPS on Stack Overflow: The End of a Long Road. Parent comment

Re:HTTPS on Stack Overflow: The End of a Long Road by johncolanduoni on Monday May 22, 2017 @04:35PM (#14396711)
Mere server-side logging can pick out something like this via User-Agent. Is it spying to count the number of times a request with "Windows NT 5.1" is sent to your server?
[ Parent | on HN ]
Re:HTTPS on Stack Overflow: The End of a Long Road by jlgaddis on Monday May 22, 2017 @07:19PM (#14397636)
Mere server-side logging can include the negotiated encryption parameters (but doesn't by default, IIRC).
[ Parent | on HN ]
Re:HTTPS on Stack Overflow: The End of a Long Road by johncolanduoni on Tuesday May 23, 2017 @01:20AM (#14398970)
Yes, of the connection the server is party to. It's bad security to record them, but how is it spying?
[ Parent | on HN ]