3 ms·
HTTPS ensures the following things 1. You are talking to the domain that you think you are. 2. No one else can see the traffic in transit. 3. No one has modifi
by kevincox 6y ago
HTTPS ensures the following things
1. You are talking to the domain that you think you are.
2. No one else can see the traffic in transit.
3. No one has modified the traffic.
It does not provide any guarantee around the trustworthiness of the domain itself. (Well EV Certs try but as far as I am concerned that is worthless.)
1 and 3 are not helpful in your example of "Am I supposed to trust them more than some man-in-the-middle" but it does help once you establish other trust in that domain. For example a friend sent you the link, or you start using the site regularly.
However personally even just 2 is a tangible benefit when I am using public connections. I very much like the idea that my browser will not send out an unencrypted data without my explicit approval.