3 ms·
Unless the host you're connecting to has some kind of certificate pinning in play, typing `example.org` into your browser will make the initial request in the c
by annabellish 9y ago
Unless the host you're connecting to has some kind of certificate pinning in play, typing `example.org` into your browser will make the initial request in the clear, which can be hijacked even if it immediately bounces you to https.
- Ajedi32 9y agoThat's true even if the DNS response isn't hijacked though, which was the point of my second paragraph.