3 ms·
It hardly matters that the cert is expired if you're not logging in. Contrary to popular belief, TLS is not beneficial for sites where you aren't sharing secret
by bigstrat2003 3y ago
It hardly matters that the cert is expired if you're not logging in. Contrary to popular belief, TLS is not beneficial for sites where you aren't sharing secret data.
- wizzwizz4 3y agoIt's beneficial for all the other sites if non-secret data is TLS-encrypted, though. If I want to ban secrets, and HTTPS is only used for secrets, I can just ban TLS; but if HTTPS is used for most of the web, I have to ban most of the web (and such a ban will never last long). Additionally, metadata such as browser history can reasonably be considered a secret: TLS helps protect that somewhat.
- ytoawwhra92 3y ago> Contrary to popular belief, TLS is not beneficial for sites where you aren't sharing secret data. I wish this meme would die. Integrity is still important for non-secret data. Confidentiality is important for data which may be considered secret in some contexts but not others.
- ukuina 3y agoWhat are the negative effects of questionable integrity of Reddit textual content?
- ytoawwhra92 3y agoInjecting malicious scripts, malicious links, spam, advertising, misinformation, or other harmful content such that it appears to the user to have been served from a trusted domain.
- CRConrad 3y agoCan't a "trusted" domain itself, i.e. one with a non-expired cert, do all that shit just as well as a "non-trusted" one? AIUI, the cert only confirms that you are who you say you are, not that you're a good guy. I mean,are you saying Facebook doesn't have a cert, or that it doesn't have spam and advertising?