3 ms·
>One thing I would strongly recommend you to do anytime you visit a page where you want a little more security, is opening a private navigation window and using
by djm_ 13y ago
>One thing I would strongly recommend you to do anytime you visit a page where you want a little more security, is opening a private navigation window and using https exclusively. Doing this single-handedly eliminates attacks like BREACH (the latest https hack).
As far as I'm aware, it would not mitigate BREACH. Can anyone shed any light on why it would?
- lucb1e 13y agoYou can't do arbitrary requests, which is required for that attack (and CRIME) to work. This is normally done by injecting traffic in http pages, but if you are using incognito mode for https exclusively then this can't be done. In fact the same goes for normal browsing mode, but it's so inconvenient to have to close all other tabs just to do a wire transfer or something. And incognito mode has the additional advantage of also disabling tracking cookies and the like. My bank actually uses Google analytics on their website...
- deleted 13y ago[deleted]