brownianemotion

Re:Covid vaccine: First ‘milestone’ vaccine offers 90% protection on Monday November 09, 2020 @09:08AM (#25034926)

Glad to hear the virus is not dangerous, a pity you've informed us all so late!

Re:The Architecture of Open Source Applications on Tuesday October 06, 2020 @07:23AM (#24696596)

The thing is, once you man in the middle it, without https, you can serve whatever content you want. It is no longer a page of "text and images", but one with malicious scripts, malicious links, ... you name it.

Re:The Architecture of Open Source Applications on Wednesday September 30, 2020 @05:57AM (#24637062)

It's a trusted site, without https it's e.g. easier to perform a mitm attack that could expose users to attacks.

Not only encryption is important, authentication too, you want to know to which party you are talking.

Re:Structure and Interpretation of Computer Programs (SICP) Book on Thursday September 10, 2020 @07:07AM (#24431097)

A great way to let someone understand recursion is to let them learn how the principle of mathematical induction works. It gets rid of all the noise related to the programming language.

Re:Pasco, Florida’s predictive policing system monitors and harasses r... on Thursday September 03, 2020 @11:07AM (#24364758)

I'm speechless, this is terrifying. I hope the protests in the US lead to change for these people.

Re:Ask HN: Is TLS 1.2 broken (enough)? on Thursday August 27, 2020 @07:25AM (#24292541)

It was not clear to me that it was specifically the combination with ESNI that was being blocked.

Ask HN: Is TLS 1.2 broken (enough)?

Posted by brownianemotion on Thursday August 27, 2020 @04:00AM
from the ask-hn dept.

While reading about the Great Chinese Firewall blocking all TLS 1.3 traffic I was wondering why they allow TLS 1.2 traffic? My first guess would be that the web would be unusable without it ... but on the other hand, I can't imagine they are allowing vast amounts of traffic that can't be snooped on. Is TLS 1.2 broken enough, so that they are able to gather all (meta)data they need?

( Read More... | 2 comments | 2 points | on HN )