News for hackers. Stuff that matters.

A comment on Google Plans to Deprecate FTP URL Support in Chrome. Parent comment

Re:Google Plans to Deprecate FTP URL Support in Chrome by clhodapp on Saturday August 17, 2019 @03:01AM (#20722613)
Alright. It's not encrypted and not origin-verifiable then. I think we all knew that though... anyway it should be abundantly clear at this point that no one should be using protocols that can trivially be MITM'ed to access anything over the internet.
[ Parent | on HN ]
Re:Google Plans to Deprecate FTP URL Support in Chrome by dieFledermaus on Saturday August 17, 2019 @11:00AM (#20724345)
>...anyway it should be abundantly clear at this point that no one should be using protocols that can trivially be MITM'ed to access anything over the internet.

This is a specious argument because HTTP/HTTPS is regularly (and legally) MITM'ed[0, 1].

If we shouldn't use anything that can be MITM'ed, shouldn't we just shut down the internet? Wouldn't that stop MITM attacks permanently-like? What about phones? Or letters? Or even talking? Where does this scare-tactic of the MITM "boogey-man" end (for you)?

[0] - https://www.symantec.com/products/proxy-sg-and-advanced-secu...

[1] - https://www.occrp.org/en/daily/10431-kazakh-officials-delay-...

[ Parent | on HN ]
Re:Google Plans to Deprecate FTP URL Support in Chrome by Someone1234 on Saturday August 17, 2019 @09:16AM (#20723861)
Or involves the plain text transmission of passwords by design.
[ Parent | on HN ]