Chrome 68 Released: HTTP Sites Marked as “Not Secure”

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by omeid2 on Wednesday July 25, 2018 @04:47AM (#17607805)

To play the devil's advocate and being very cynic (which is always fair game IMHO):

This change has the effect of pushing even mundane websites to use SSL, and so locking out corporate-level and other players from analysing web usage, or at least making them less effective, which enhances and increases the Google's "web scale" analysis dominant position even more.

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by exikyut on Wednesday July 25, 2018 @06:25AM (#17608175)

I have this exact problem on my LAN. https://news.ycombinator.com/item?id=17540111

In order to analyze my own information/data, I have to break HTTPS (setup a proxy MITM box, install CAs on all devices), then put it back together again securely enough (secure++ the MITM box) to be confident in doing my banking etc.

Argh.

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by nsgi on Thursday July 26, 2018 @05:38PM (#17621473)

What stops you either using a browser extension or analysing encrypted data sent between IPs?

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by RandomInteger4 on Wednesday July 25, 2018 @04:54AM (#17607826)

Nani? What does https have to do with analyzing web usage? Whatever that means exactly.

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by omeid2 on Wednesday July 25, 2018 @05:00AM (#17607848)

ISPs (almost all of them) and lots of corporate (school, business, university) firewalls run analysers on websites and aggregate that data.

This data can provide a fair bit of powerful insight and intelligence into things like change of trends and growth of businesses.

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by ealhad on Wednesday July 25, 2018 @04:57AM (#17607838)

When using HTTPS, our ISP can only see the server you're connecting to, not what you're doing.

[ Parent | on HN ]

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by swebs on Wednesday July 25, 2018 @01:30PM (#17611081)

>locking out corporate-level and other players from analysing web usage

That sounds a lot like wiretapping to me. How did this not already fall under wiretapping laws?

[ Parent | on HN ]