3 ms·
I'm not the most versed in encryption & stuff, so does Let's Encrypt prevents / subvert Verizon's HTTP modification? EDIT: ah it's supercookie[1] and apparent
by unexistance 10y ago
I'm not the most versed in encryption & stuff,
so does Let's Encrypt prevents / subvert Verizon's HTTP modification?
EDIT: ah it's supercookie[1] and apparently a full protection is "Only a VPN or Tor"
[1] https://www.eff.org/deeplinks/2014/11/verizon-x-uidh https://www.eff.org/deeplinks/2014/11/verizon-x-uidh
- cpeterso 10y agoHTTPS is adequate to protect you against X-UIDH injection, but many sites still don't support HTTPS.
- allendoerfer 10y agoWith HTTPS you are protected against this, the EFF is saying, that a "full protection is only a VPN or Tor", because you have no control over whether the website offers HTTPS or not. In each of these cases the traffic is encrypted, Verizon can read only gibberish and cannot know where to insert its tracking code, while with HTTP it sees exactly where the HTTP headers end and can add another to them.
- kevincox 10y agoNot only does it not no where to put them but TLS also provides verification so that the traffic can't be tampered with.