3 ms·
> Is a lot easier to lean on one or two CDN operators than it is to lean on every ISP in the country. First of all, that's ignoring how easy it is to MiTM on a
by thayne 5y ago
> Is a lot easier to lean on one or two CDN operators than it is to lean on every ISP in the country.
First of all, that's ignoring how easy it is to MiTM on a public wifi network.
Secondly, if a CDN starts misbehaving, customers can switch to a different one. For many people in the US at least if an ISP is misbehaving, there may not be any other option to switch to.
- marginalia_nu 5y agoIt's a matter of scale. You can perform opportunistic small scale mitm attacks on wifi. Maybe that is a concern for interactive websites. But servers that only host static content, why do they need encryption? And how would you find out if a cdn was misbehaving, especially in the context of gag orders? And even if we did find out, it's out in the open that Facebook and Google is doing all this really invasive tracking, yet nobody seems to be leaving them in any hurry.