Chrome 68 will mark all HTTP sites as “not secure”

Re:Chrome 68 will mark all HTTP sites as “not secure” by roblabla on Thursday February 08, 2018 @09:32PM (#16337459)

I've been MITM'd numerous time in the past. I've been MITM by corporate netorks filtering my traffic. I've been MITM'd by scummy and public wifi hotspots trying to inject ads. My own domain provider once MITM'd my domain in a weird attempt to tell me my domain was expiring...

I'm not trying to protect myself from a targeted attack. I'm trying to protect myself from the enormous amount of scummy behavior in this whole industry. When I connect to my bank, I want my data to be secure not only against malicious activity, but negligence and incompetence. This is the threat model that HTTPS-Everywhere protects against.

Sure, people get bitten by viruses and phishes. But let's fix things one step at a time.

[ Parent | on HN ]

Re:Chrome 68 will mark all HTTP sites as “not secure” by dingo_bat on Thursday February 08, 2018 @09:44PM (#16337516)

> When I connect to my bank, I want my data to be secure not only against malicious activity, but negligence and incompetence.

What bank do you use that doesn't use https already? Maybe it's time to change your bank rather than force every website in the world to switch to https.

[ Parent | on HN ]

Re:Chrome 68 will mark all HTTP sites as “not secure” by fiddlerwoaroof on Thursday February 08, 2018 @10:05PM (#16337601)

Of course my office pushes a root certificate to all the devices and Skype for Business breaks unless you’ve trusted that certificate to handle SSL traffic.

[ Parent | on HN ]