News for hackers. Stuff that matters.

A comment on Chrome 68 will mark all HTTP sites as “not secure”. Parent comment

Re:Chrome 68 will mark all HTTP sites as “not secure” by icebraining on Friday February 09, 2018 @01:22AM (#16338311)
If it's unauthenticated, the portal doesn't give you any advantage beyond showing a message.

If it's authenticated, you should be using WPA-Enterprise anyway, which supports different logins, and actually isolates the traffic between clients, whereas those "portals" don't, allowing any other user to sniff your traffic.

[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by ComodoHacker on Friday February 09, 2018 @01:29AM (#16338346)
It's surely authenticated, but I don't want guests to use WPA-Enterprise. I just need a way to communicate temporary passwords to them.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by icebraining on Friday February 09, 2018 @02:06AM (#16338475)
Right, and WPA-Enterprise (which even many cheap home routers support nowadays) is that way - you can just generate temporary logins.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by ComodoHacker on Friday February 09, 2018 @03:40AM (#16338783)
WPA-Enterprise is a way to authenticate users, not a way to distribute logins/passwords. Am I missing something about it?
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by icebraining on Friday February 09, 2018 @03:42AM (#16338788)
I guess I misunderstood you before. You're using the portal to provide passwords to the users? How does that work?
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by ComodoHacker on Friday February 09, 2018 @04:11AM (#16338909)
Portal shows a message like "here's your temporary login/password for 4 hours". Then a user enters them to the login form. When using WPA-Enterprise, a user can also set up WPA on their device with these credentials.
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by q3k on Friday February 09, 2018 @06:45AM (#16339483)
If the portal provides you with the credentials and also asks for them, what's the point of that portal in the first place?
[ Parent | on HN ]
Re:Chrome 68 will mark all HTTP sites as “not secure” by ComodoHacker on Friday February 09, 2018 @11:35AM (#16341571)
You can use them across multiple sessions and devices.
[ Parent | on HN ]