News for hackers. Stuff that matters.

A comment on Widespread Hijacking of Search Traffic in the United States. Parent comment

Re:Widespread Hijacking of Search Traffic in the United States by JoachimSchipper on Friday August 05, 2011 @04:53PM (#2851722)
> proxies can unwrap HTTPS

They cannot get at the plaintext without a certificate warning (or installing a certificate in the user's browser beforehand).

[ Parent | on HN ]
Re:Widespread Hijacking of Search Traffic in the United States by pnathan on Friday August 05, 2011 @06:02PM (#2851975)
They cannot get at the plaintext without a certificate warning (or installing a certificate in the user's browser beforehand).

Which will get clicked through anyway, so, uh, the security is kinda moot. =)

[ Parent | on HN ]
Re:Widespread Hijacking of Search Traffic in the United States by Cushman on Saturday August 06, 2011 @12:43AM (#2853038)
I don't know why you were downvoted for this, it's a very cogent point— most users would probably click through a big red screen that says "DO NOT VISIT THIS WEB SITE!" We need to be thinking of them when we design our security model.
[ Parent | on HN ]