Text-only NPR - Hackdot

Re:Text-only NPR by throwahey on Tuesday September 26, 2017 @09:34PM (#15344197)

Can someone explain to me why a news website needs HTTPS? Barring pages that require entry of financial information, why would you need to encrypt this kind of traffic? Is people snooping on what news articles you read a real concern?

Genuine question here.

[ Parent | on HN ]

Re:Text-only NPR by greggarious on Wednesday September 27, 2017 @09:30AM (#15347581)

HTTPS provides integrity checks as well as encryption.

Would you want someone between you and the site modifying it's contents in transit?

https://en.wikipedia.org/wiki/Tailored_Access_Operations#QUA...

[ Parent | on HN ]

Re:Text-only NPR by bradbatt on Tuesday September 26, 2017 @09:53PM (#15344271)

So ISPs and government entities and others can't see what you're reading.

[ Parent | on HN ]

Re:Text-only NPR by kxyvr on Tuesday September 26, 2017 @09:56PM (#15344285)

Here's a longer answer at superuser:

https://superuser.com/questions/563851/how-isp-sees-the-http...

But, yes, since ISPs may be getting into the business of analyzing and selling our browsing habits, https limits the amount of information that they see such as what particular page is viewed on a site. Certainly, that doesn't stop other ways to track, but it's a reasonable one.

[ Parent | on HN ]