News for hackers. Stuff that matters.
Re:Http://www.google.com/wo0dh3ad by wladimir on Friday January 07, 2011 @08:03AM (#2079405)
Yes, it's not perfect either. It won't stop the NSA or even China's government. But it would stop me, and probably you, from pulling this trick :)

Using SSL(TLS) everywhere would go a long way toward security. It's much preferable over plaintext.

I really loathe arguments like "it's not perfectly secure, so let's use something even less secure". Making it harder means a larger investment for the attacker, especially as they have to do the certificate trick for each individual site instead of some simple interception blanket.

There are no comments on this comment yet.