Re:The Right to Lie and Google’s “Web Environment Integrity”
by saulrh on Sunday July 30, 2023 @09:45PM
(#36937973)
Right, I knew I was forgetting something about that. Yeaaaaaah.
And speaking of that, let's not forget about downgrade attacks! Removing HTTP is the least worst option in much the same way that you disallow RC4 when negotiating encryption for an SSH connection.
And speaking of that, let's not forget about downgrade attacks! Removing HTTP is the least worst option in much the same way that you disallow RC4 when negotiating encryption for an SSH connection.