3 ms·
That's easy, TLS is great for Google as ISPs and wifi providers can't replace ads with their own in transit.
by kryptiskt 10y ago
That's easy, TLS is great for Google as ISPs and wifi providers can't replace ads with their own in transit.
- tptacek 10y agoThat is some Alex Jones level reasoning. There's no end-user security you can provide that can't be reframed that way.
- DiabloD3 10y agoWhat he said isn't even entirely wrong... both adware and shitty ISPs do this, mostly as a vector for malware. Google has admitted as such, and migrating their ad platform to https and teaching Chrome and Firefox to refuse mixed content was part of not allowing their service to be abused for this. Just because Google sells something we don't like doesn't mean they're evil, but it means they have a responsibility to limit the attack surface outside attackers use. There is no way to eliminate all attack surface while still allowing third party admins or closed source code (technically, its impossible period, but w/e).
- kryptiskt 10y agoBelatedly seen this. For the record I just want to note that I claimed that Google have sound business reasons to promote TLS, i.e. that their ads can't be MITMed. I have no clue why tptacek would go ballistic at that suggestion.