News for hackers. Stuff that matters.

A comment on Chrome is deploying HTTP/3 and IETF QUIC. Parent comment

Re:Chrome is deploying HTTP/3 and IETF QUIC by agwa on Wednesday October 07, 2020 @04:20PM (#24712277)
It's not. You could install a root certificate from the ISP and then they could man-in-the-middle your traffic.

Encryption is what allows user choice rather than leaving you at the mercy of your ISP.

[ Parent | on HN ]
Re:Chrome is deploying HTTP/3 and IETF QUIC by cute_boi on Thursday October 08, 2020 @03:53AM (#24716905)
Its not true. At least in mobile app they use something called ssl pinning to serve ads.
[ Parent | on HN ]
Re:Chrome is deploying HTTP/3 and IETF QUIC by agwa on Thursday October 08, 2020 @08:44AM (#24718597)
Then your problem is that you have a locked down device that isn't truly yours. App makers always had the ability to use a proprietary encrypted protocol to serve ads. DNS-over-HTTPS doesn't give them that ability. But it does provide a standard that people who do really own their own devices can use to preserve user choice. No one should protest that.
[ Parent | on HN ]
Re:Chrome is deploying HTTP/3 and IETF QUIC by jhasse on Thursday October 08, 2020 @03:45AM (#24716862)
You can't easily use custom root certificates on Android.
[ Parent | on HN ]