4 ms·
The NSA and other state actors can use non-secure pages to inject code to exploit the browser and compromise your visitors. http://en.wikipedia.org/wiki/FOXACI
by dsl 12y ago
The NSA and other state actors can use non-secure pages to inject code to exploit the browser and compromise your visitors.
http://en.wikipedia.org/wiki/FOXACID#QUANTUM_attacks http://en.wikipedia.org/wiki/FOXACID#QUANTUM_attacks
- icebraining 12y agoState actors are probably irrelevant in this discussion; few of them won't be able to get a certificate to any website they want, in my opinion.
- dsl 12y agoThis is a known issue and being addressed as well. http://tools.ietf.org/html/draft-ietf-websec-key-pinning-11 http://tools.ietf.org/html/draft-ietf-websec-key-pinning-11 http://dev.chromium.org/sts http://dev.chromium.org/sts