Re:Is Google overreaching by forcing me to use TLS?
by zAy0LfpBZLC8mAC on Thursday March 27, 2014 @12:55PM
(#7481670)
The point of TLS is to protect against MitM. The server refusing the non-TLS connection is not safe against MitM, a MitM can still claim to be the target server and accept the connection and thus (potentially) compromise the website/account/whatever. That is why the client has to refuse even trying to connect without TLS.
[ Parent
| on HN ]
There are no comments on this comment yet.