Re:Former NSA chief Keith Alexander has joined Amazon’s boar...
by sjs382 on Wednesday September 09, 2020 @11:55PM
(#24428746)
> Browsing on Amazon was not encrypted until quite recently. Add To Cart wasn't encrypted.
What do you mean by this? HTTPS has always been supported for browsing and adding to cart.
Re:Former NSA chief Keith Alexander has joined Amazon’s boar...
by schoen on Thursday September 10, 2020 @06:12AM
(#24430752)
I think this varied by country. I was working on some HTTPS advocacy targeted at web sites before it was so ubiquitous, and I remember Amazon in the U.S. not allowing you to browse items with HTTPS probably sometime around 2010 (I think they would send a redirect back to the HTTP site).
Re:Former NSA chief Keith Alexander has joined Amazon’s boar...
by chrisseaton on Thursday September 10, 2020 @06:32PM
(#24437241)
> HTTPS has always been supported for browsing and adding to cart.
HTTPS was only experimentally supported by one browser when Amazon launched so this is clearly not the case, is it?
Re:Former NSA chief Keith Alexander has joined Amazon’s boar...
by hollander on Thursday September 10, 2020 @11:23AM
(#24433176)
Definitely not in the EU. It changed 5 or 8 years ago, but before that is was not encrypted.
Re:Former NSA chief Keith Alexander has joined Amazon’s boar...
by pc86 on Thursday September 10, 2020 @01:26PM
(#24434516)
Even taking into account the comments below, you can still see the URLs and thus determine the products folks are browsing even with SSL.
- Checking out on Amazon was always encrypted.
- Browsing on Amazon was not encrypted until quite recently. Add To Cart wasn't encrypted.
- High end network equipment includes support for monitoring your browsing on the guest wifi to send URLs from you browsing Amazon to price-compare or buy. See, for instance, Cisco Analytics for Retail.