4 ms·
If you want another reason for enabling HTTPS, even for shitty blogs - on one of my visits to the US, I stayed at a motel that was snooping on my Wifi traffic,
by bad_user 13y ago
If you want another reason for enabling HTTPS, even for shitty blogs - on one of my visits to the US, I stayed at a motel that was snooping on my Wifi traffic, injecting their own ads in Google's searches and displaying their own banners in the websites I was visiting.
If you're the owner of a Wifi network, there are already available solutions for monetizing users' traffic, by injecting ads, like this one: http://rgnets.com/ http://rgnets.com/
So you, as the publisher of a shitty blog or website, do you really want ISPs, motels or any other third-party to mess with your own content, to inject their own scripts and frames in your HTML, to degrade the experience for your readership?
One easy way of fixing that is HTTPS. HTTPS is not just for security or privacy, it's also for digitally signing the content that's being served.
- waps 13y agoHere's my guide for when to enable HTTPS : Always. You're just adding one more reason. Anybody can do this if you're not using https (with real certificate).
- Sami_Lehtinen 13y agoHttps doesn't stop them, mitm solves the problem for them. I'm sure you have already seen it, if you travel a lot. It's bad idea to redirect http to https. It's much better to drop http support completely. Redirection weakens security.
- flyt 13y agoThis is why we have HSTS.
- Sami_Lehtinen 13y agoAnd secure cookies, yes. But as we have seen, those things simply do not work out. As the usual layered security approach, it's good idea not to provide HTTP service at all, so redirection isn't hiding failures to use HTTPS.
- bad_user 13y agoYou can't MITM without the browser giving huge warnings about how the connection is not secure, therefore I noticed that networks that do this avoid doing it for HTTPS connections. The only way you can MITM successfully without the user noticing is if you control the browser used (e.g. Nokia).
- deleted 13y ago[deleted]
- nly 13y agoMy solution to these problems is to use OpenVPN while travelling. Bonus: access to geoip restricted content.