News for hackers. Stuff that matters.

A comment on The modern HTTPS world has no place for old web servers. Parent comment

Re:The modern HTTPS world has no place for old web servers by cguess on Wednesday May 13, 2020 @12:48PM (#23168833)
Also could imply where you're going to. Looking up the weather in London (if I don't normally) almost certainly entails a trip.

This is pretty deep down the threat modeling hole though, and no, normal people don't need to care about this.

[ Parent | on HN ]
Re:The modern HTTPS world has no place for old web servers by SilasX on Wednesday May 13, 2020 @03:10PM (#23170550)
What, you don't bombard weather APIs with dummy requests about random cities so as to obscure where you might be going?
[ Parent | on HN ]
Re:The modern HTTPS world has no place for old web servers by brewdad on Wednesday May 13, 2020 @03:27PM (#23170756)
When baseball season is actually occurring I will sometimes look up weather in a half dozen cities around the country to get an idea of which games might get rained out. Not exactly the same thing but I'm not actually traveling to any of them.
[ Parent | on HN ]
Re:The modern HTTPS world has no place for old web servers by bowmessage on Wednesday May 13, 2020 @12:59PM (#23168968)
Normal people don't even know what HTTPS means!
[ Parent | on HN ]
Re:The modern HTTPS world has no place for old web servers by kstrauser on Wednesday May 13, 2020 @01:33PM (#23169363)
That's why we like to use it everywhere: to protect the people who didn't know they needed protection.
[ Parent | on HN ]
Re:The modern HTTPS world has no place for old web servers by bowmessage on Wednesday May 13, 2020 @08:20PM (#23173540)
Yeah, +1, what I meant to convey too :)
[ Parent | on HN ]