News for hackers. Stuff that matters.

A comment on The Right to Lie and Google’s “Web Environment Integrity”. Parent comment

Re:The Right to Lie and Google’s “Web Environment Integrity” by johncolanduoni on Sunday July 30, 2023 @06:44PM (#36936764)
If it didn't require authentication, Comcast could just MITM you.
[ Parent | on HN ]
Re:The Right to Lie and Google’s “Web Environment Integrity” by saulrh on Sunday July 30, 2023 @09:45PM (#36937973)
Right, I knew I was forgetting something about that. Yeaaaaaah.

And speaking of that, let's not forget about downgrade attacks! Removing HTTP is the least worst option in much the same way that you disallow RC4 when negotiating encryption for an SSH connection.

[ Parent | on HN ]