News for hackers. Stuff that matters.

A comment on Nokia: Yes, we decrypt your HTTPS data, but don’t worry about it. Parent comment

Re:Nokia: Yes, we decrypt your HTTPS data, but don’t worry a... by ferongr on Thursday January 10, 2013 @09:58PM (#5041103)
You're conflating different issues.

A browser based on an open-source codebase with many people auditing its source-code and network traffic (there was much paranoia about Chrome when it was released). And even in that case, you have the choice to use a completely open-source browser that has a different stance on user privacy (Firefox).

An NPAPI plugin that can be easily disabled.

A third-party BOX MITM all your secure connections without your knowledge.

I don't think the above are comparable in magnitude.

[ Parent | on HN ]
Re:Nokia: Yes, we decrypt your HTTPS data, but don’t worry a... by jarrett on Friday January 11, 2013 @02:25PM (#5044446)
You're right--the third is the worst by far. And this proves that you can't trust a pre-installed, commercial browser until it has been thoroughly audited by independent researchers.
[ Parent | on HN ]