3 ms·
He is both right and wrong IMO. Ssl is about encrypted communication to and from the server, but the cerrificate also means that you are sending your data to a
by S_A_P 14y ago
He is both right and wrong IMO. Ssl is about encrypted communication to and from the server, but the cerrificate also means that you are sending your data to a trusted authority, and the people are who they say they are. I think the real issue is that the switch from http -> https can be a security hole and the safest bet is to use ssl before you ever start entering credentials.
- BaseBand 14y agoIt's always good practice to type in the https. It's not to difficult to stop the redirect from http => https.
- zaptheimpaler 14y agoIf the server redirects from HTTP to HTTPS, how is it possible to stop it?
- BaseBand 14y agoMITM attack. If your on the same networking and the router isn't configured to block ARPing. You can proxy the traffic that filters out the redirect. Your proxy keeps the https connection open and passes back unsecured content. Public wifi can be a bad idea sometimes...