News for hackers. Stuff that matters.

A comment on Chrome 68 will mark all HTTP sites as “not secure”. Parent comment

Re:Chrome 68 will mark all HTTP sites as “not secure” by namelost on Thursday February 08, 2018 @08:36PM (#16337203)
> - distrubute a native (electron?) app that interfaces with my device and trusts my cert, and disallow direct browser access.

This is the most secure choice, using something like websockets to transfer data only.

Unless your product is completely offline and never connected to the internet, I don't think an IoT device that runs a web server is ever a good idea. All it takes is one successful remote attack, and soon your users could be installing ransomware at the device's direction!

Don't serve HTML/JS from a device that you can't physically pull the plug on.

[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by quickthrower2 on Friday February 09, 2018 @12:21AM (#16338077)
> Don't serve HTML/JS from a device that you can't physically pull the plug on.

Or virtually pull the plug, in the case of cloud hosted sites.

[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by notatoad on Friday February 09, 2018 @12:54PM (#16342310)
I'm not sure how your comment is supposed to help.

I don't think a web server is ever a good idea. All it takes is one successful remote attack and soon your users could be installing ransomware! We'd better shut down the internet.

[ Parent | on HN ]