3 ms·
It's even worse than that. LinkedIn actively moves you off HTTPS, and onto plain HTTP. Here's 2 situations: * https://linkedin.com https://linkedin.com Redirec
by scott_w 13y ago
It's even worse than that. LinkedIn actively moves you off HTTPS, and onto plain HTTP.
Here's 2 situations:
* https://linkedin.com https://linkedin.com Redirects To www.linkedin.com
* https://www.linkedin.com https://www.linkedin.com works, but all links go to www.linkedin.com
Not only that, but all the static resources are loaded over HTTP (FF and Chrome both warn about this).
This shouldn't come as a surprise, because the LinkedIn team can't be trusted to lock their fucking car doors, let alone secure a website.
- throwawaykf 13y agoYour first link goes to an https page for me in Safari on iPad.
- scott_w 13y agoThe configurations are different for mobile devices. Mobile devices do link to https:// https:// but they still load the static files over HTTP.
- throwawaykf 13y agoHmm, I just tried going to that link in Chrome and Firefox on a MacBook Pro -- Still takes me to an https. Also, doing an "inspect element" on a couple of images on there show me "https://static.licdn.com/..." https://static.licdn.com/..." All the other links on that page (about, etc) do go to http://-only http://-only pages, but at least the links you provided and their static resources all go over https.
- Theodores 13y ago...presumably you have 'nothing to hide', then. Previous poster must be one of those kiddie porn obsessed al-qaeda terrorists, worthy of being Quantumed whereas you are good.
- DigitalJack 13y agohttps://www.eff.org/https-everywhere https://www.eff.org/https-everywhere