News for hackers. Stuff that matters.

A comment on Google Plans to Deprecate FTP URL Support in Chrome. Parent comment

Re:Google Plans to Deprecate FTP URL Support in Chrome by dijit on Saturday August 17, 2019 @05:21AM (#20723043)
Drivers have versions in them, it's part of the driver itself and therefor cryptographically signed.

People like to cargo cult TLS as if it's the only option but it's really not, even debian doesn't use https (and gets quite a bit of backlash despite understanding very well their security model): https://whydoesaptnotusehttps.com/

[ Parent | on HN ]
Re:Google Plans to Deprecate FTP URL Support in Chrome by orf on Saturday August 17, 2019 @07:45AM (#20723511)
I'm not sure if you remember, but soon after that site hit the HN frontpage several CVEs where discovered in the way APT uses http that would have been mitigated if they used HTTPS.
[ Parent | on HN ]
Re:Google Plans to Deprecate FTP URL Support in Chrome by dchest on Saturday August 17, 2019 @09:23AM (#20723891)
https://gist.github.com/roycewilliams/cf7fce5777d47a8b222655...

Specifically, for drivers: https://lifars.com/2016/01/significant-security-flaw-discove...

[ Parent | on HN ]
Re:Google Plans to Deprecate FTP URL Support in Chrome by hiq on Saturday August 17, 2019 @07:44AM (#20723504)
The CVE mentioned at the beginning of the page you linked is one of the reasons why TLS is still nice to have, security-wise. Saying that TLS is the only option may be an overstatement, but saying that it definitely provides some benefits is not.
[ Parent | on HN ]