News for hackers. Stuff that matters.

A comment on Amazon S3 Path Deprecation Plan – The Rest of the Story. Parent comment

Re:Amazon S3 Path Deprecation Plan – The Rest of the Story by lugg on Thursday May 09, 2019 @05:59AM (#19866777)
That's not what explicitly means. Ssl explicitly does prevent mitm attacks from intercepting URLs of requests.

The fact you can get around it by ignoring the cert is a bit irrelevant. It's like saying locks don't work because people can break your window.

[ Parent | on HN ]
Re:Amazon S3 Path Deprecation Plan – The Rest of the Story by cthalupa on Tuesday May 14, 2019 @08:58AM (#19909009)
As noted, you don't have to ignore the cert, and we're talking about state level actors.

And it's not the window. It's like saying locks don't work if the state has a master key, which they do.

[ Parent | on HN ]