3 ms·
Would you say its better than plain HTTP? Or is the false sense of true security a bigger detriment?
by hayksaakian 12y ago
Would you say its better than plain HTTP?
Or is the false sense of true security a bigger detriment?
- justcommenting 12y agoi think it really depends on your threat model
- aidenn0 12y agoThis is important; there are cases of "just plain insecure" but other than that, it's very nuanced. How about you randomly generate and write all your passwords down on a piece of paper in your wallet? For many threat models, that's far more secure than even using a password manager. For other threat models it's far less secure than using a password manager. Other than things that are just flat-out broken "more-secure" and "less-secure" don't exist without qualification.
- Animats 12y agoOr is the false sense of true security a bigger detriment? That's a really tough call. Cloudflare makes no security guarantees. They don't even commit to keeping your public key secure when you give it to them. That's a bad sign. One wonders how they fund their free MITM service.