Iran forged the wrong SSL certificate

Re:Iran forged the wrong SSL certificate by RexRollman on Thursday September 01, 2011 @11:41AM (#2950444)

After I started using NoScript, I was amazed at how many sites load Javascript from other sites. Google-analytics is common but I have noticed more and more sites are trying to load Facebook scripts as well.

Happily, my bank doesn't load Javascript from anywhere else.

[ Parent | on HN ]

Re:Iran forged the wrong SSL certificate by ordinary on Thursday September 01, 2011 @01:15PM (#2950845)

> After I started using NoScript, I was amazed at how many sites load Javascript from other sites.

Not only that, but I was surprised how much paranoia-induced plugins like NoScript and RequestPolicy induce paranoia themselves. And not entirely without cause, either: sites that load 5 different analytics systems are not uncommon, and I've seen 10 different ad providers on a single page.

[ Parent | on HN ]

Re:Iran forged the wrong SSL certificate by cjdavis on Thursday September 01, 2011 @12:33PM (#2950673)

Or so you think - as the parent says, it just takes a DNS entry to make somebody else's server appear to be yours.

[ Parent | on HN ]

Re:Iran forged the wrong SSL certificate by ceejayoz on Thursday September 01, 2011 @12:50PM (#2950734)

That, or they might proxy a remote JS file through a script on their servers. I've seen that done a number of times.

[ Parent | on HN ]