3 ms·
The typical argument is if only sensitive traffic is encrypted, you know that something is worth attacking because it is encrypted. Ergo, encrypt everything, a
by sliverstorm 12y ago
The typical argument is if only sensitive traffic is encrypted, you know that something is worth attacking because it is encrypted.
Ergo, encrypt everything, and the sensitive stuff can hide in a sea of meaningless traffic.
- dwild 12y agoThere not much I really need to have encrypted, my bank website, my emails, my files on cloud services and my ssh sessions. Anyone that can do a MITM over HTTPS can really easily find the hostname of all theses IP. in fact anyone could find the hostname of theses IP....
- IgorPartola 12y agoAnd every password and login form you use to protect your passwords. And every government form you fill out (they often require personal identifying info). And every link that links to those forms, etc. There are a lot more ways to attack a connection than just hijacking a cleartext bank password.
- dwild 12y agoThat's why I double and triple check the URL on important service before I fill out everything.