What we give away when we log on to a public Wi-Fi network

Re:What we give away when we log on to a public Wi-Fi network by Maxnuf on Sunday October 19, 2014 @07:49AM (#8477990)

In the original Dutch article (https://decorrespondent.nl/845/Dit-geef-je-allemaal-prijs-al...) the author explained in the comments that they used SSLstrip for facebook and live.com So, the connection was over HTTP and not HTTPS. They added a padlock favicon.ico image to give the impression the site was secure

[ Parent | on HN ]

Re:What we give away when we log on to a public Wi-Fi network by k_bx on Sunday October 19, 2014 @08:14AM (#8478040)

Ah. I wonder how hard would it be to extend protocol to let Facebook, for example, state that they will never go https again, so that browser would scream.

[ Parent | on HN ]

Re:What we give away when we log on to a public Wi-Fi network by Quentangle on Sunday October 19, 2014 @08:38AM (#8478078)

If you meant to say "never go http again", then the protocol for that already exists.

http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

https://plus.google.com/+JoshuaBerg/posts/YrdsMzYzotr

https://hstspreload.appspot.com/

[ Parent | on HN ]

Re:What we give away when we log on to a public Wi-Fi network by k_bx on Sunday October 19, 2014 @11:53AM (#8478563)

That is cool, thank you!

[ Parent | on HN ]

Re:What we give away when we log on to a public Wi-Fi network by DasIch on Sunday October 19, 2014 @08:44AM (#8478094)

Isn't this exactly what HSTS is for?

[ Parent | on HN ]