4 ms·
Demonstration video has the researcher sniff passwords from match.com, which uses TLS. The catch is they aren't using HSTS and so they are vulnerable to sslstri
by discreditable 9y ago
Demonstration video has the researcher sniff passwords from match.com, which uses TLS. The catch is they aren't using HSTS and so they are vulnerable to sslstrip.
- pnutjam 9y agoTrue, using a vpn gives you control over "an" encryption layer for your traffic, relying on the sites https will always be less ideal.