3 ms·
This is simply not true. If TLS fails, the vehicle used for code delivery has been compromised and can be used to deliver compromised code. Everything written i
by hlandau 10y ago
This is simply not true. If TLS fails, the vehicle used for code delivery has been compromised and can be used to deliver compromised code. Everything written in the article is only true if you assume that the code is delivered with its integrity in tact, which on the web is a property that can only be guaranteed by TLS.
- ubernostrum 10y agoThe article wasn't about delivering software updates. 1Password provides syncing of password vaults and online access, and this article explains how they do not rely solely on SSL/TLS to secure that data in-flight, and thus the Cloudflare issue could not have exposed such data in a usable way to third parties.