5 ms·
That GitHub page in particular, versus any GitHub page? That'd involve a TLS break, no?
by remexre 6y ago
That GitHub page in particular, versus any GitHub page? That'd involve a TLS break, no?
- jonfw 6y agoJust did some research, and you're right! TLS obscures the URL by default. I didn't know that. Only nuance being that an attacker can draw conclusions about the length of the URL- which won't be very helpful on Github.
- jerheinze 6y agoTLS alone is not sufficient. Fortunately, Github is also on the HSTS preload list.
- a1369209993 6y ago> length of the URL Also the length of the response, which is significantly more 'helpful', although probably not enough for a working attack unless you're willing to harrass a significant fraction of your intellectual workforce over false positives.
- pvarangot 6y agoYeah they need to hack or infiltrate Github, or get a warrant for your data.
- FandangoRanger 6y agoGood thing Microsoft isn’t voluntarily in the PRISM progra-
- corobo 6y agoTaking bets on "Microsoft was nudged into buying GitHub by one of the three letter clubs" being revealed one day