2 ms·
Almost completely missing from the page is one of the biggest reasons for HTTPS -- the ISPs messing with the pages. - Many wifi providers, like boingo (remembe
by theamk 5y ago
Almost completely missing from the page is one of the biggest reasons for HTTPS -- the ISPs messing with the pages.
- Many wifi providers, like boingo (remember it?) inserting ads to _each page_, sometimes breaking them.
- Hotel and hospital wifi blocking a random subset of pages because they were deemed "bad"
- Caching proxies not respecting headers the origin server sent and serving old data.
In the FAQ, he mentions that but the answer is "sign the content" -- but that system does not exist, and does not fully protect you anyway (the caching proxy can still return older data). And his talk about signing is more secure and efficient that encryption because everyone can pre-sign content offline is pretty funny given that his website is dynamic wordpress site :)