Ars tests Internet surveillance by spying on an NPR reporter

Re:Ars tests Internet surveillance by spying on an NPR reporter by Smerity on Wednesday June 11, 2014 @05:28PM (#7880552)

Browsers tend to only complain if doing so breaks security, such as using Javascript from a HTTP source on a HTTPS page: the JS could be swapped out by a man-in-the-middle. If you use or communicate using HTTPS on a HTTP page, there's no real issues.

You can actually force Google Analytics to use HTTPS on a HTTP page[1] with _gaq.push(['_gat._forceSSL']) but it's not the default. If it's not the default, it's not going to be used heavily across the hundreds of thousands of pages using Google Analytics. Privacy death by a thousand cuts.

[1]: https://developers.google.com/analytics/devguides/collection...

[ Parent | on HN ]

Re:Ars tests Internet surveillance by spying on an NPR reporter by jacquesm on Wednesday June 11, 2014 @05:29PM (#7880558)

That's something that might be fixable with a user-script or a browser plug-in?

Maybe something for the likes of ghostery or adblock to implement?

[ Parent | on HN ]