3 ms·
Integrity is only 1/3 of the major benefits of TLS. The other 2 (privacy and authentication) are very important as well and for many are the main reason TLS is
by Klathmon 10y ago
Integrity is only 1/3 of the major benefits of TLS.
The other 2 (privacy and authentication) are very important as well and for many are the main reason TLS is wanted.
- forgotpwtomain 10y agoDo you care about privacy and authentication when downloading react.js from a CDN?
- Klathmon 10y agoYou might not, but some may. Others still may care about keeping their ISP or the public WiFi they are on from seeing they are downloading some scripts from CDNs. Things like that are great for fingerprinting (only 2 sites happen to use these 6 scripts with these specific versions, so if someone downloads those they are on one of those sites). Plus it still leaks tons of data in the headers. Request time, cache length, useragent, cookies (maybe, hopefully not), accept-* headers, if modified since leaking the last download time, and possibly a lot more.