4 ms·
Is HTTP (without the S) only risky if you're transmitting data, and not just browsing?
by TurkishPoptart 6y ago
Is HTTP (without the S) only risky if you're transmitting data, and not just browsing?
- ghayes 6y agoAn insecure connection can be trivially eavesdropped (e.g. by your network peers, router, ISP or intermediate hops). Much of the time this will include identifying information such as your IP address and browser cookies. Consider reading medical publications or other personal topics and having that logged by an unrelated third-party. TLS adds significant privacy to your browsing habits, even when not transmitting data, per se. Edit: and, as others have said, the content can be modified by a man-in-the-middle attacker, which can inject fake content or malware.
- bobbylarrybobby 6y agoNo, you're still susceptible to MITM attacks. I could imagine an election info site, that said the election was November 3, being MITM'd by an adversary who changed the page to say November 4, causing many voters to miss the election by a day.