News for hackers. Stuff that matters.

A comment on Open Wireless Movement. Parent comment

Re:Open Wireless Movement by psychometry on Wednesday June 11, 2014 @12:43AM (#7876543)
And what if you need to login to a site that isn't SSL-secured? There's nothing the end user (you) can do about that.
[ Parent | on HN ]
Re:Open Wireless Movement by toomuchtodo on Wednesday June 11, 2014 @12:49AM (#7876556)
You should never be using a site without SSL if you're passing authentication information.

Now, while I understand this is out of an end user's control, that shouldn't cause us to throw the idea of a shared wireless network out the door. That should cause us to look at non-secure sites accepting credentials, and how to prevent that behavior in the first place.

[ Parent | on HN ]
Re:Open Wireless Movement by INIT_6 on Wednesday June 11, 2014 @01:00AM (#7876576)
https://www.eff.org/https-everywhere

this site helps with this issue forcing sslany.

[ Parent | on HN ]
Re:Open Wireless Movement by psychometry on Wednesday June 11, 2014 @01:11AM (#7876584)
Installing a browser add-on doesn't make websites lacking an SSL certificate magically acquire one. The fact is that there are still a lot of sites out there that don't have them.
[ Parent | on HN ]
Re:Open Wireless Movement by userbinator on Wednesday June 11, 2014 @03:39AM (#7876856)
You use a VPN to tunnel to a trusted server and have it initiate the cleartext connection to the site, keeping the traffic between you and that server encrypted.
[ Parent | on HN ]
Re:Open Wireless Movement by mkesper on Wednesday June 11, 2014 @05:08AM (#7877057)
Not easy as in everyone has access to a __trusted__ VPN tunnel server.
[ Parent | on HN ]