4 ms·
Adoption of HTTPS helps somewhat to counter this, but note that advertisers and content sites are also complicit. Carriers wouldn't have injected such headers w
by otoburb 10y ago
Adoption of HTTPS helps somewhat to counter this, but note that advertisers and content sites are also complicit. Carriers wouldn't have injected such headers without demand from content partners and other run-of-the-mill sites.
Vilifying carriers only attacks half the problem.
- themartorana 10y ago"...run-of-the-mill sites." Highly doubtful. Someone running ads on their site doesn't make them suddenly complicit and knowledgeable about the creepiest corners of ad-tech. This is _exactly_ why knowledgeable regulators should make this illegal - this is a situation where the people on both ends are unaware of an explicit MITM attack happening between them.