News for hackers. Stuff that matters.

A comment on HTTPS as a ranking signal. Parent comment

Re:HTTPS as a ranking signal by dsl on Thursday August 07, 2014 @03:15AM (#8146593)
The NSA and other state actors can use non-secure pages to inject code to exploit the browser and compromise your visitors.

http://en.wikipedia.org/wiki/FOXACID#QUANTUM_attacks

[ Parent | on HN ]
Re:HTTPS as a ranking signal by icebraining on Thursday August 07, 2014 @03:50AM (#8146668)
State actors are probably irrelevant in this discussion; few of them won't be able to get a certificate to any website they want, in my opinion.
[ Parent | on HN ]
Re:HTTPS as a ranking signal by dsl on Thursday August 07, 2014 @04:03AM (#8146709)
This is a known issue and being addressed as well.

http://tools.ietf.org/html/draft-ietf-websec-key-pinning-11

http://dev.chromium.org/sts

[ Parent | on HN ]