Chrome’s address bar will use https:// by default

Re:Chrome’s address bar will use https:// by default by jodrellblank on Tuesday March 23, 2021 @05:05PM (#26560394)

3 months? I must have updated FireFox / Discord / VS Code /etc. about a hundred times in last 3 months. Plenty for them to add renewed SSL whatevers inside one of the updates.

[ Parent | on HN ]

Re:Chrome’s address bar will use https:// by default by Wowfunhappy on Tuesday March 23, 2021 @07:00PM (#26561438)

> 3 months? I must have updated FireFox / Discord / VS Code /etc.

I think this state of affairs is nuts. With the exception of Firefox, because web browsers have an inordinate number of security issues to contend with.

[ Parent | on HN ]

Re:Chrome’s address bar will use https:// by default by throwaway53453 on Wednesday March 24, 2021 @05:48AM (#26565227)

And other programs don't?

[ Parent | on HN ]

Re:Chrome’s address bar will use https:// by default by Wowfunhappy on Wednesday March 24, 2021 @12:40PM (#26569568)

An instant messaging client shouldn’t be executing arbitrary remote code, no.

[ Parent | on HN ]

Re:Chrome’s address bar will use https:// by default by throwaway53453 on Saturday March 27, 2021 @01:29PM (#26603846)

It's not really possible to prevent that. E.g. a well crafted image can easily trigger an RCE on some older versions of Android: https://nakedsecurity.sophos.com/2019/02/08/android-vulnerab...

Issues like this exist at all layers of the stack, so anything touching the internet needs regular security patches.

[ Parent | on HN ]

Re:Chrome’s address bar will use https:// by default by Wowfunhappy on Sunday March 28, 2021 @06:20PM (#26615248)

I agree completely. But, I also think that in most cases, if a simplistic piece of software like an IM app needs a security patch every three months, regularly, it's a sign the attack surface is too large.

[ Parent | on HN ]