3 ms·
If it didn't require authentication, Comcast could just MITM you.
by johncolanduoni 3y ago
If it didn't require authentication, Comcast could just MITM you.
- saulrh 3y agoRight, I knew I was forgetting something about that. Yeaaaaaah. And speaking of that, let's not forget about downgrade attacks! Removing HTTP is the least worst option in much the same way that you disallow RC4 when negotiating encryption for an SSH connection.