5 ms·
Umm, "pirate website" that uses a secure.sci-hub.io, but not actually a secure connection. Really, Let's Encrypt has made this a no-brainer. Anyone making a sit
by Jeaye 11y ago
Umm, "pirate website" that uses a secure.sci-hub.io, but not actually a secure connection. Really, Let's Encrypt has made this a no-brainer. Anyone making a site should be expected to be using SSL. Especially those making anything related to anything "pirate" or "secure."
- StavrosK 11y agoBecause if there's one thing pirates are known for, it's their commitment to your security.
- zanny 11y agoI just checked, the two most popular public torrent sites have COMODO CA default-on https. These sites do want to maintain security, so their users can keep coming back rather than getting copyright strikes or worse fines and getting scared off. That doesn't stop them from putting viruses in the ad banners, but that is not getting their users arrested.
- chris_wot 11y agoExcept that torrent sites are not necessarily completely used for pirating.
- knowaveragejoe 11y agoTorrent sites, especially the popular ones mentioned above, are almost entirely used for pirating. Bittorrent, on the other hand, is not exclusively used for piracy.
- tombrossman 11y agoPirates that don't pay attention to security don't last very long, so I would tend to agree with that statement. Try a quick survey of the most popular pirate sites and see how many support HTTPS. You might be pleasantly surprised.
- StavrosK 11y agoThat's not caring about security, it's just not wanting to get blocked by firewalls. I don't think you can seriously argue that pirate sites care about security when the biggest thing on a page is an adware-installing, fake "DOWNLOAD" button.
- tombrossman 11y agoHow does HTTPS help circumvent firewalls? I wasn't aware this was a feature. My understanding is that a firewall blocking file-sharing sites would do so whether the site was HTTP or HTTPS. My point is that by using HTTPS, these sites have demonstrated a higher level of proficiency with security tools than many more popular mainstream sites. I agree the scammy fake download buttons are a problem though, but that's what ad-blockers are for...
- Kristine1975 11y agoHow does HTTPS help circumvent firewalls? The firewall cannot do deep packet inspection on encrypted connections, since it cannot decrypt the data: https://en.wikipedia.org/wiki/Deep_packet_inspection https://en.wikipedia.org/wiki/Deep_packet_inspection
- singold 11y agoBut AFAIK they can block the whole domain, when you access an https site any proxy or firewall you have can see the domain but nothing more. For example a firewall would see that you entered Google.com but not what you searched
- bcook 11y agoA firewall cannot see encrypted layer-7 traffic, true, but you can block sites by IP/hostname. HTTPS does not help you circumvent firewalling.
- cyphar 11y agoI'm fairly sure that raiding ships isn't very good for the security of the crew. Although, it might teach them to invest in better cannons.
- dingaling 11y ago> Really, Let's Encrypt has made this a no-brainer. Sure, if you have the time and opportunity to check that the certificate renewal has worked properly every 60 days. Once you've written a cron job, of course, to do the renewal. For someone who's primary task isn't IT that's probably not something they want to worry about or will forget about until people complain that the SSL is broken. Probably better to throw $ to her to buy a multi-year SSL cert from a vendor.
- userbinator 11y agoLooking at it another way, a certificate issued by a CA is another thing that can be revoked by the authorities to immediately give browser warnings and cause people to think the site has been "hacked" somehow. Browsers rejecting self-signed certificates also makes that route useless.