News for hackers. Stuff that matters.
Re:HTTP/2.0 – Please admit defeat by throwaway7767 on Monday May 26, 2014 @11:51AM (#7800223)
If I understand your argument correctly, you are opposed to oppurtunistic encryption as there is no identity validation, as it does not improve privacy.

But an active man-in-the-middle attack at least has a chance of being detected, as opposed to the current passive sniffing being done on a wholesale basis. Do you not see any value in that?

(I have not followed the HTTP/2 development closely enough to comment on other areas of concern.)

Re:HTTP/2.0 – Please admit defeat by phkamp on Monday May 26, 2014 @03:13PM (#7801081)
You read me wrong then.

I'm opposed to a protocol which claims to "improve privacy" while leaving some of the most troubling privacy invasions in place.

If we are going to the trouble to upgrade HTTP, we fix all the serious problems we can.