News for hackers. Stuff that matters.
Re:Microsoft bakes a VPN into Edge and turns it on by nlewycky on Friday September 30, 2022 @10:00PM (#33043066)
> No, I am not going to do work on it, any work, at all.

Without HTTPS, the content can be replaced entirely. Last time it was JavaScript that DDOS'd github. If you don't want to serve content over HTTPS, then you don't care what your users receive. Just delete the site and they all get 404's instead, since you already admit that you don't care either way.

If it makes you feel any better, HTTP without HTTPS was a mistake we all made together. It should never have happened.

Re:Microsoft bakes a VPN into Edge and turns it on by jjav on Saturday October 01, 2022 @01:18AM (#33044107)
> If it makes you feel any better, HTTP without HTTPS was a mistake we all made together. It should never have happened.

Given that http predates SSL 1.0 by a few years, somewhat inevitable.

Re:Microsoft bakes a VPN into Edge and turns it on by sanroot99 on Saturday October 01, 2022 @01:08AM (#33044060)
Seems ,like since inception internet protocols was designed with foreseeable security implications, Gnunet is project is attempting to solve this
Re:Microsoft bakes a VPN into Edge and turns it on by account42 on Thursday October 06, 2022 @07:09AM (#33106793)
Given that HTTP without TLS can provide backwards compatibility while anyone and their dog is advocating for deprecating TLS versions and them being too complex for most people to maintain on their own, I respectfully disagree that plain HTTP was a mistake.