News for hackers. Stuff that matters.

A comment on Chrome 68 will mark all HTTP sites as “not secure”. Parent comment

Re:Chrome 68 will mark all HTTP sites as “not secure” by dingo_bat on Thursday February 08, 2018 @09:43PM (#16337512)
Can't an ISP's DNS server tell you that https://www.google.com is at 10.10.10.10? And that is an internal server hosting whatever ISP wants.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by Franciscouzo on Thursday February 08, 2018 @09:49PM (#16337536)
They can, but you will get a certificate error, because the ISP doesn't has a valid certificate for the domain.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by rhencke on Thursday February 08, 2018 @10:00PM (#16337576)
Exactly. It will show up in any modern browser with a big red "This site is not safe!" type of message if that was to happen. This is one of the reasons Google (and others) so proactively protect the certificate infrastructure so meticulously, and run efforts like https://www.certificate-transparency.org/
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by IncRnd on Thursday February 08, 2018 @11:34PM (#16337911)
Yes, and that is an argument for https with certificates...
[ Parent | on HN ]