Re:Chrome’s address bar will use https:// by default
by xg15 on Wednesday March 24, 2021 @10:53AM
(#26567967)
Yeah, that absolutely makes sense - as I said, a site could also avoid the timeout by sending a TCP RST packet. My point was more that I believe not many sites are doing any of this as in the past, "best-practice" firewall configuration was to be as silent as possible.
[ Parent
| on HN ]
Re:Chrome’s address bar will use https:// by default
by zaarn on Thursday March 25, 2021 @07:02AM
(#26578673)
Being as silent as possible has only two effects; an attacker takes 2 seconds longer and you significantly degrade the network experience of all your users. It hasn't been best-practise in a while (outside the greybeard firewall admin circles), ie, almost a decade at this point. Anyone who hasn't figured that out should really consider not doing network admin if their knowledge is a decade out of date.
Re:Chrome’s address bar will use https:// by default
by xg15 on Thursday March 25, 2021 @09:09AM
(#26579763)
Hmm, OK. Might be that my knowledge was not really up-to-date there. I'd really appreciate if network protocols designed for common benefit (such as ICMP) are not discouraged due to security for a change. In this case, sorry for spreading FUD, that wasn't my intention.