4 ms·
Not to mention if DNS isn't encrypted and you control the network you can just redirect requests wherever you want.
by c22 6y ago
Not to mention if DNS isn't encrypted and you control the network you can just redirect requests wherever you want.
- ec109685 6y agoNot to a non-https website if the user is visiting a secure site. Apple should disable javascript for non https sites.
- aeternum 6y agoAbility to disable javascript for non-https would be a great security setting. Aligns well with Apple's goal for privacy and security as many wireless hotspots and even ISPs abuse HTTP javascript injection.
- tjoff 6y agoIronically, in response when people realize how good the non-javascript web is they will demand all sites be http.
- yonixw 6y agoLocation header still can redirect you to well-crafted HTTPs site, so it won't really help
- ec109685 6y agoGood point.