News for hackers. Stuff that matters.

A comment on The NSA called me after midnight and requested my source code (2018). Parent comment

Re:The NSA called me after midnight and requested my source ... by iancarroll on Tuesday April 21, 2020 @07:27PM (#22940397)
Just to be clear, no web browser has ever (AFAIK) allowed a navigation for https:// to downgrade to http://. It's only when the protocol is not explicit (i.e. typing only "domain.com") do problems really arise.
[ Parent | on HN ]
Re:The NSA called me after midnight and requested my source ... by meowface on Tuesday April 21, 2020 @11:17PM (#22941723)
They may have meant finding a link to it elsewhere from a plaintext site, in which case they could sslstrip it. (Before more modern safeguards, at least.)
[ Parent | on HN ]