WeWork isn’t a tech company; it’s a soap opera

Re:WeWork isn’t a tech company; it’s a soap opera by bspammer on Thursday August 15, 2019 @01:55PM (#20707764)

Application layer security doesn't just mean VPNs. What websites are you connecting to with sensitive information that don't use HTTPS with HSTS preload nowadays?

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by geofft on Thursday August 15, 2019 @04:05PM (#20709088)

Here's one from just yesterday: the password reset form for sched.com, which the Linux Foundation uses for schedules, is HTTP. I had to follow this link to upload my slides for a talk I'm giving at a LF conference next week.

Yes, the ideal, which we should all be actively working towards, is HTTPS. That doesn't mean that the world is already there.

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by dankohn1 on Thursday August 15, 2019 @05:30PM (#20709875)

Note that Let's Encrypt, which is making universal https possible, is also part of the Linux Foundation.

I was going to complain to sched.com for you, but I can't replicate the problem:

https://ossna19.sched.com/password-reset is the default and http://ossna19.sched.com/password-reset redirects to it.

(I work for the Linux Foundation.)

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by geofft on Thursday August 15, 2019 @09:49PM (#20711478)

The email you get in your inbox when you do that is http. It starts with http://a.sched.com/track/click/.

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by dankohn1 on Monday August 19, 2019 @02:00PM (#20740085)

I worked with Sched.com this week based on your feedback and that link is now https. Thanks.

[ Parent | on HN ]

Re:WeWork isn’t a tech company; it’s a soap opera by quickthrower2 on Wednesday August 21, 2019 @06:13AM (#20755915)

Awesome work

[ Parent | on HN ]