3 ms·
It's just a plain website that doesn't do anything besides give you some text and images. This is technology that has functioned just fine for decades. I don't
by maxharris 6y ago
It's just a plain website that doesn't do anything besides give you some text and images. This is technology that has functioned just fine for decades. I don't understand why it needs SSL at all - where's the private information that might be intercepted by someone in the middle?
- shivasurya 6y agoThe intention isn’t about private information. What if essay text is modified in transit/injected with advertisements?
- sushshshsh 6y agoDunno, try it!
- inquirerofsorts 6y agoRather than go to all that effort of doing something illegal for an individual, it's far simpler to find prior work. https://www.google.com/search?q=javascript+injection+by+isps https://www.google.com/search?q=javascript+injection+by+isps
- CawCawCaw 6y agoOr QUANTUM INSERT/man-on-the-side attacks.
- dvfjsdhgfv 6y agoIf I lived in a country where all ISPs are allowed to inject my traffic with ads, I probably wouldn't use the Internet without a decent VPN.
- andi999 6y agoSo?
- dvfjsdhgfv 6y agoThe consensus among young devs these days is such a situation would be an abomination, that it's a sign of disrespect towards the visitor and that you should be publicly shamed for this.
- crcastle 6y agoSSL (well, TLS now) serves three purposes. 1. Ensuring you are getting the information the website author intends for you to get. i.e. data can’t be manipulated in transit. 2. Ensuring the information you are getting is in fact coming from the domain you are requesting it from. 3. Preventing others between you and the website from seeing the information sent back and forth. I think you questioned the need for TLS here assuming 3 was the only purpose of TLS?