News for hackers. Stuff that matters.

A comment on Supporting Let’s Encrypt, the nonprofit making HTTPS free for all. Parent comment

Re:Supporting Let’s Encrypt, the nonprofit making HTTPS free... by ArchOversight on Monday June 14, 2021 @06:04PM (#27508907)
> incredibly rare for a man-in-the-middle attack to take place at the ISP level in the US.

Comcast and other ISP's would love to have a word with you with their injecting JavaScript to warn you about going over your alloted data usage... same for various other providers that injected ads, or man in the middled YouTube connections (T-Mobile) to reduce the quality delivered over their network or the hidden CDN's to reduce interconnect load...

ISP's have "managed" their networks in a variety of ways, and a lot of those "techniques" were straight up hijacking your original request.

[ Parent | on HN ]
Re:Supporting Let’s Encrypt, the nonprofit making HTTPS free... by simfree on Tuesday June 15, 2021 @02:36AM (#27512022)
T-Mobile is throttling all traffic from certain IP addresses in their current Binge On scheme, primarily to reduce edge load (on their cell towers) as that is where nearly all of their network congestion occurs.

Binge On doesn't do much different for http video content compared to https content as far as I have read and seen.

[ Parent | on HN ]
Re:Supporting Let’s Encrypt, the nonprofit making HTTPS free... by ArchOversight on Wednesday June 16, 2021 @08:13PM (#27534921)
These days they may simply throttle entire IP blocks, there was a time when they would purposefully change the manifest file that was served to users to reduce the available qualities thereby forcing the client to think there was no higher quality video content available.
[ Parent | on HN ]