News for hackers. Stuff that matters.

A comment on The Architecture of Open Source Applications. Parent comment

Re:The Architecture of Open Source Applications by brownianemotion on Wednesday September 30, 2020 @05:57AM (#24637062)
It's a trusted site, without https it's e.g. easier to perform a mitm attack that could expose users to attacks.

Not only encryption is important, authentication too, you want to know to which party you are talking.

[ Parent | on HN ]
Re:The Architecture of Open Source Applications by pc86 on Wednesday September 30, 2020 @02:58PM (#24642339)
What attacks is a malicious agent going to execute on a page of articles?

I think HTTPS is all well and good, but I've yet to hear a compelling reason why pages of text and images need it.

[ Parent | on HN ]
Re:The Architecture of Open Source Applications by brownianemotion on Tuesday October 06, 2020 @07:23AM (#24696596)
The thing is, once you man in the middle it, without https, you can serve whatever content you want. It is no longer a page of "text and images", but one with malicious scripts, malicious links, ... you name it.
[ Parent | on HN ]