6 ms·

Baidu will serve the script over HTTPS (though firefox complained about a bad certificate), the issue is that it will also serve it over HTTP, and some 3rd part

Baidu will serve the script over HTTPS (though firefox complained about a bad certificate), the issue is that it will also serve it over HTTP, and some 3rd party pages request the HTTP version.

ryanlol 7y ago
No browser will load the script from within a <script> tag because of the bad certificate, serving the script with a bad certificate achieves nothing.
- simias 7y ago
  The whole point is that the pages being modified are served over HTTP, there's no certificate there, good or bad.
  - ryanlol 7y ago
    The whole point is that you couldn’t use the script over HTTPS even if you really wanted to.
    - simias 7y ago
      Oh okay I see what you mean now, sorry for the misunderstanding.