2 ms·
At least in the current state of browsers, they all try https:// https:// first. That may not have been the case when the attack in question that's shown in the
by dkonofalski 6y ago
At least in the current state of browsers, they all try https:// https:// first. That may not have been the case when the attack in question that's shown in the article was performed but every major browser now checks https:// https:// before http:// http://.
- gruez 6y ago>At least in the current state of browsers, they all try https:// https:// first. That's trivially disproven by typing "example.com" in the address bar and hitting enter. Both chrome and firefox goes to the http version not the https version, even though the https version is available. Even if that were true though, an attacker in a position to perform an MITM attack can also block the https connection from going through, forcing the browser to make a http connection.
- boring_twenties 6y agoWhy would anyone post something like this without even bothering to check if it's actually true, which takes less time than typing the comment itself?