3 ms·
That's why we need HTTPS everywhere. I really hope letsencrypt.org takes off.
by imaginenore 12y ago
That's why we need HTTPS everywhere.
I really hope letsencrypt.org takes off.
- blfr 12y agoHow would SSL improve things? Publishers are complicit here. They could include trackers in their SSL-enabled websites.
- revscat 12y agoHTTPS is transport later security. It does not solve the problem of tracking.
- imaginenore 12y agoHttpOnly, and, as far as I know, HTTP-only cookies can't be injected if you use HTTPS. * HttpOnly restricts all access to document.cookie in IE7, Firefox 3, and Opera 9.5 (unsure about Safari) * HttpOnly removes cookie information from the response headers in XMLHttpObject.getAllResponseHeaders() in IE7. It should do the same thing in Firefox, but it doesn't, because there's a bug. * XMLHttpObjects may only be submitted to the domain they originated from, so there is no cross-domain posting of the cookies.