News for hackers. Stuff that matters.

A comment on Intent to deprecate: Insecure HTTP. Parent comment

Re:Intent to deprecate: Insecure HTTP by Dylan16807 on Monday April 13, 2015 @02:37PM (#9369472)
If it's inside the organization then they can put in a local cert and run a cache.

It only prevents caches that are in the middle and trusted by neither end. I'm okay with that in almost all cases.

[ Parent | on HN ]
Re:Intent to deprecate: Insecure HTTP by voidlogic on Monday April 13, 2015 @02:47PM (#9369558)
What about dorms, hospitals (patient wifi), libraries, hotels, cafes and small ISPs? They do not have access to their clients certs-
[ Parent | on HN ]