6 ms·
> The signature aspect only ensures you are connecting to the right server, not that the content has been tempered with. It is not PGP. The “T” in TLS stands f
by woodruffw 2y ago
> The signature aspect only ensures you are connecting to the right server, not that the content has been tempered with. It is not PGP.
The “T” in TLS stands for “transport.” It absolutely does guarantee that the content has not been tampered with, unless you don’t trust the website itself (in which case you would trust the PGP key no more or less than you would the website’s certificate).
But regardless, this kind of argument against encryption is just plain bad: there are all kinds of things you might want to do on the Internet that don’t involve passwords or “secret” information that a passive adversary (like a government or ISP) shouldn’t be able to observe. The contents of the political websites you visit, for example. This is especially true on our modern Internet, where observing individual endpoint IPs doesn’t really tell the passive adversary much (thanks to CGNAT and SNI/multiple sites hosted on the same IP).