Re:The modern HTTPS world has no place for old web servers
by purerandomness on Thursday May 14, 2020 @09:31AM
(#23179250)
It's not authorities, anyone setting up a router can peek into this information, and more importantly, tamper with it.
Remember Upside-Down-Ternet? [1]
Re:The modern HTTPS world has no place for old web servers
by Silhouette on Thursday May 14, 2020 @10:40AM
(#23180102)
Right, which is why I said HTTPS should be the default for web traffic potentially crossing any untrusted network.
But who is going to set up a hostile router in an office of five people? Or in someone's home?
Re:The modern HTTPS world has no place for old web servers
by earthboundkid on Thursday May 14, 2020 @12:48PM
(#23181874)
Google will put a router in a coffee shop and log everyone who walks by. :-)
HTTPS is useful, and it should normally be the default for web traffic potentially crossing any untrusted network, but let's keep it in perspective. It's an application layer protocol. It can't protect you against attacks at lower layers.