News for hackers. Stuff that matters.

A comment on Show HN: CryptoNote is an open source, encrypted, one time view message app. Parent comment

Re:Show HN: CryptoNote is an open source, encrypted, one tim... by jlgreco on Friday June 07, 2013 @03:32PM (#5841110)
Or (in enough cases to be a valid concern), not without using sslstrip. Which is trivial.
[ Parent | on HN ]
Re:Show HN: CryptoNote is an open source, encrypted, one tim... by uh_oh on Friday June 07, 2013 @04:33PM (#5841604)
If you are the recipient of the link, SSL can't be stripped.

Even if you are an author, assuming you have visited the site over SSL at least once, then it can't be stripped on future visits since the site seems to use HSTS.

[ Parent | on HN ]
Re:Show HN: CryptoNote is an open source, encrypted, one tim... by jlgreco on Friday June 07, 2013 @05:18PM (#5841982)
It is trivial to strip links being sent to a user over unsecured channels.

There are many things that can mitigate an sslstrip style attack, but coverage from those things is patchy.

[ Parent | on HN ]