News for hackers. Stuff that matters.

A comment on HTTPS Watch. Parent comment

Re:HTTPS Watch by mappu on Monday January 19, 2015 @05:11AM (#8911234)
Chur bro. Pretty quick turnaround there

Note that westpac's sensitive area is on a separate subdomain sec.westpac.co.nz and does enforce http->https redirect - www.westpac.co.nz is just static marketing stuff.

Also for TSB, you have 'The HTTPS site redirects to HTTP.' but this doesn't seem to really be the case in a web browser.

[ Parent | on HN ]
Re:HTTPS Watch by kyhwana2 on Monday January 19, 2015 @05:24AM (#8911261)
Yeah, it looks like the script doesn't handle the . to www. redirects. I've fixed them all up (hopefully) and a few scores have changed.

It's only checking the main sites, not the separate internet banking login pages atm.

[ Parent | on HN ]
Re:HTTPS Watch by kyhwana2 on Monday January 19, 2015 @06:14AM (#8911376)
Oh, there was a bug in the script, i've merged gutworth's latest code that fixes it (And the weird green tick when the TCP connection just gets reset).

Page has been updated :)

[ Parent | on HN ]