Let’s stop punishing IoT devices that embrace HTTPS

Re:Let’s stop punishing IoT devices that embrace HTTPS by pfg on Wednesday August 30, 2017 @02:03PM (#15134450)

Are you suggesting this change merely for users navigating to IP addresses in reserved IP space, or for everything?

If it's the latter, all that stands between an active MitM and my paypal.com credentials is a non-blocking "Not Secure" indicator in the address bar. That's not really acceptable.

[ Parent | on HN ]

Re:Let’s stop punishing IoT devices that embrace HTTPS by moo360 on Wednesday August 30, 2017 @07:06PM (#15136873)

I just feel like separating the concerns of

1) Identity of the server

2) If the connection to the server is encrypted or not

would be a good idea in modern browsers. Because the article is completely correct, everything as it is right now essentially disincentives anyone producing IoT or any other kinds of consumer based lan devices from using https.

[ Parent | on HN ]