3 ms·
Security? Where do you see security issues outside of login data (which is already over HTTPS)? This seems like a privacy feature (something not necessarily ev
by arrrg 13y ago
Security? Where do you see security issues outside of login data (which is already over HTTPS)?
This seems like a privacy feature (something not necessarily everyone cares about when it comes to their feedreading), not security.
- stephen_mcd 13y agoHow do you think the authenticated session is maintained?
- jamespo 13y agoDon't want the NSA reading my I can haz cheezburger feed
- cenhyperion 13y agoThey've got the certificates so they'll see your lolcats either way.
- da_maire 13y agoAny site viewed over plain HTTP is susceptible to content injection by ISPs, public wifi providers, employers, etc, basically anyone between you and the server. At best it's annoying, at worst it's a security hazard. And as someone else mentioned, the session cookie is still transmitted in plaintext, which effectively compromises your Feedly account.
- hamburglar 13y agoNot to be too glib about it, but for God's sake, who cares? It's my Feedly account. It holds my read/unread status for my daily newsfeeds. What's the big hacker target here? Spoofing that I've already read Hacker News today? Subscribing me to feeds I don't want? I encourage Feedly not to waste time securing that on my behalf.