News for hackers. Stuff that matters.

A comment on Chrome 68 will mark all HTTP sites as “not secure”. Parent comment

Re:Chrome 68 will mark all HTTP sites as “not secure” by eropple on Thursday February 08, 2018 @10:01PM (#16337583)
That's not sufficient when the external page can be controlled and the iframe target set by it.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by slobotron on Thursday February 08, 2018 @11:22PM (#16337869)
Agreed that in situation like this it's near impossible to ascertain that iframe target wasn't altered, unless you already somehow know what it was before you got mitmd.
[ Parent | on HN ]