2 ms·
Well the API that is behind TLS can provide content verification data (file hashes). Then the client can reject any tampered stuff even without encryption on t
by eknkc 7y ago
Well the API that is behind TLS can provide content verification data (file hashes).
Then the client can reject any tampered stuff even without encryption on the transport.
- elithrar 7y agoThat still breaks the experience. Now you have tampered content AND broken clients. TLS does wonders for preventing transparent proxies, DPI & ISPs from modifying or tracking what you see.
- dwild 7y ago> That still breaks the experience. Now you have tampered content AND broken clients. You won't have tampered content if the data is rejected, that's absurd. You can do the same with TLS by the way, that's the whole point of TLS, being able to verify (and thus reject or not) data. Sure it break the client, but you can do that in any situation, just have to unplug a wire ;).