News for hackers. Stuff that matters.

A comment on Chrome 68 Released: HTTP Sites Marked as “Not Secure”. Parent comment

Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by swebs on Wednesday July 25, 2018 @01:49PM (#17611243)
>HTTPS is about securing the connection to the website and NOT about identifying the website.

Unfortunately, it's both. Otherwise we would have had widespread encrypted connections decades ago. I'm not sure why browsers decided that no encryption is just fine, but encryption with a self-signed certificate triggers warnings that it's the end of the world.

[ Parent | on HN ]
Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure” by lordlimecat on Wednesday July 25, 2018 @02:59PM (#17611843)
Because negotiated encryption is useless if you can't be sure you're talking to the right person. If you are using a self-signed cert with an unknown thumbprint, how does the other side know you aren't a MITM attacker?
[ Parent | on HN ]