News for hackers. Stuff that matters.
Re:Is Google overreaching by forcing me to use TLS? by zAy0LfpBZLC8mAC on Thursday March 27, 2014 @12:55PM (#7481670)
The point of TLS is to protect against MitM. The server refusing the non-TLS connection is not safe against MitM, a MitM can still claim to be the target server and accept the connection and thus (potentially) compromise the website/account/whatever. That is why the client has to refuse even trying to connect without TLS.

There are no comments on this comment yet.